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A  SHORT  MES8AGB 


Thlg  Conference  emphasizes  the  continued  interest  of  the  Electronic 
Systems  Division  in  the  technical  and  managerial  alemants  of 
Maintainability  Engineering. 

The  systems  being  developed  by  the  BSD  are  usually  non-mission 
orientated)  that  is,  they  are  required  to  provide  almost  continuous 
performance  (availability  of  approximately  unity)  of  their  respective 
functions.  Such  systems  must  be  capable  of  allowing  rapid  recognition 
of  failure  locations  and  a  restoration  to  fai^ure-fjree  performance. 

Speakers  at  this  Conference  will  indicate  the  increasing  burdens 
placed  upon  the  Air  Force  logistic  and  maintenance  capability  during 
the  development  of  weapon  and  suppdrt  systems  since  World  War  II. 

The  Air  Force  has  taken  steps  to  eombat  this  situation. 

Quantitative  statements  for  maintainability,  design  approaches, 
demonstration  techniques  and  support  system  analysis  are  finding  their 
way  into  system  contracts.  In  addition,  a  management  philosophy  and 
approach  has  been  generated  for  Maintainability  Engineering. 

The  ESD  has  included  Maintainability  Engineering  work  elements  and 
quantitative  requirements  in  contracts  over  the  past  years.  Several 
speakers  will  indicate  past  and  cxirrent  ESD  approaches  to  Maintainability. 

It  is  obvious  that  Maintainability  Engineering  is  a  dynamic 
discipline.  Today's  methods  or  techniques  will  be  obsolete  tomorrow. 

The  ESD  intends  to  reflect  this  changing  Maintainability  technology  in 
their  contracts. 

It  is  our  hope  that  all  in  attendance  at  this  Conference  will  obtain 
a  better  understwdlng  of  the  Air  Force  approach  to  Maintainability 
Engineering  and  will  recognize,  as  we  do,  the  excellent  work  being  done 
by  industry  engineers  in  the  field  of  Maintainability  Engineering. 
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Keynote  Addregg 

"The  Air  Force  Maintainability  Program" 
Lt  Col  E.  Fallon,  Hq.  USAF 


Discussion  of  five  topics  relating  to  the  Air  Force  Maintainability 
Program. 

—  Maintainability  and  what  it  is. 

—  The  Air  Force  Maintainability  Policy. 

—  Industry's  role  in  our  program. 

—  The  Maintainability  Specification,  MIL-M-2651 2B . 

—  What  Maintainability  means  to  the  design  engineer. 


"In  the  marathon  to  assure  system  maintainability,  the  Air  Force 
has  taken  the  first  steps.  It  still  has  a  way  to  go.  However,  the 
first  steps  were  major  ones.  Msxntainabllity  has  been  recognised  as 
a  significant  design  parameter,  tjols  to  achieve  it  are  being 
Improved  and  industry  is  giving  the  Air  Force  full  cooperation  in 
the  total  program.  The  task  ahead  is  to  give  the  program  management 
attention,  to  the  end  that  maintainability  is  as  integral  to  the 
system  as  is  reliability  or  performance." 
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SiailARY 


One  of  the  major  problems  experienced  by  the  Air  Force  has  been  hig^ 
maintenance  coats  in  its  systema  inventory.  In  part,  this  is  due  to  lack 
of  ccmvlete  under  standing,  in  the  early  stages  of  the  contract,  between  the 
using  am,  the  procuring  agency  and  the  producer.  This  has  steaaed  from 
lack  of  clean-cut  definitions  of  the  terms  and  req>ilrements  involved  in 
"Maintainability" .  Uhls  paper  attempts  to  relate  the  terminology  used  with 
its  systems  concept  and  analyzes  the  definitions  involved  into  finite  terms. 
These  terms  will  be  incorporated  into  contraetuail  docuamnts  and  specifica¬ 
tions  Issued  by  ESD. 

HBRODUCTION 

The*AEtREE  Report  published  in  1957  states  that  "A  great  deal  of  sound 
work  has  been  done  to  enable  engineers  to  design  easily  maintainable  elec¬ 
tronic  systems,  but  they  must  be  educated  in  the  subject  and  conpelled  to 
study  it,  asslMlate  it,  and  Incorporate  it  in  the  systems  uhlch  they  are 
presently  designing.  Ihe  surest  way  to  do  this  is  to  include  an  iron-clad 
maintainability  req]ulrement  in  the  specifications  for  each  new  system, 
giving  maintainability  an  operational  definition  of  the  type  set  out  above 
and  rigorously  testing  and  enforcing  it.  If  this  is  done,  the  design 
engineer  will  provide  the  naintalnability  the  services  so  desperately  needed!' 

Granted  then  that  the  engineers  know  "how"  then  "why"  is  maintain¬ 
ability  such  a  problem?  In  port  at  least,  this  appears  to  be  due  to  a 
problem  of  "eomsunleations"  on  one  side  amd  to  semantics  and  basic  under¬ 
standing  on  the  other.  Cantractors  will  usually  give  us  what  we  need  if 
we  can  specify  it  and  it  is  within  practical  limits  or  "the  state  of  the 
art". 


To  iUxxstrate  the  problem  of  agreement  or  disagreement  on  termm,  let 
me  Illustrate  some  of  the  definitions  available  for  such  a  slagple  tern  as 
failure.  (Show  on  View  Graph) 

^'Reliability  of  Military  Electronic  E<iaipamnt"  -  page  336,  dtd  4  Jhne  1957* 
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DETIHITIOaS  or  rAILORE 


(1)  Failure  -  Ihe  eeseation  of  ability  of  an  item  to  neet  tbe  mlnl- 
mim  specified  perfomaace.  (MIX^STD-829  -  Page  U) 

(2)  Failure  -  A  nalfuactlon  uhleh  cannot  be  corrected  by  the  oper¬ 
ator  by  aeaas  of  controls  nonuLUy  accessible  to  hla  during  routine  opera¬ 
tion  of  the  derlce  and  idiich  results  in  Inoperatlreness  or  substandard 
perfonsance.  (Reliability,  Principles  &  Practices  -  Page  296  -  Calabro) 

(3)  Failure  -  The  oeexirenee  of  unsatisfactory  perforaance  by  sane 
specified  criterion*  (Arlne  -  Page  XII  -  Publication  Ho  123*‘7~196) 

(4)  Failure  -  A  failure  is  a  cessation  of  ability  to  perfora  a 
specified  function  or  functions  within  preriously  established  Halts  on  the 
area  of  Interest.  It  is  a  salfunetlon  which  is  beyond  adjustaent  by  the 
operator  by  aeans  of  controls  nmmally  accessible  to  hla  daring  the  routine 
operation  of  the  derlce.  This  requires  that  aeasurable  Halts  be  estab¬ 
lished  to  define  satisfactory  perfonsance  of  the  function.  (Martin  Co.  - 
Definitions  pertsdning  to  reliabiHty  -  Page  23) 

Failure  was  generally  defined  abore  as  the  cessation  of  the  ability 
to  aeet  a  specified  perfomance  but  there  are  other  fine  points  edso.  Keep 
in  Bind  there  are  several  types  of  failures:  "Catastrophic"  in  which  the 
failure  is  sudden  and  usually  cooplete  (such  as  an  open  in  a  resistor  or  a 
short  in  a  capacitor)  and  there  are  "Creeping"  failures  or  degrading  types 
in  \diieh  for  exaoQ>le  power  output  on  a  set  decreases.  Failures  can  also 
be  classified  as  "Independent"  or  "Secondary"  depending  on  idiether  they  are 
the  real  causes  of  the  trouble  or  if  in  turn,  due  to  their  falHng  another 
part  was  caused  to  fall;  for  exaagple,  a  volt^e  dropping  Resistor  shorts, 
in  turn  the  tube  is  burned  out.  We  hare  2  failxures;  one,  the  "R"  is  inde¬ 
pendent;  the  tube  is  secondary. 

The  definition  of  failure  is  crlticad  in  specifying  Reliability, 
NalntainabiHty  or  AvallablHty.  Core  nnst  be  taken,  especially  when  speak¬ 
ing  about  a  system  or  subsystem  to  define  adeqiuately  the  mode  of  operation 
and  the  specific  failure  mechanlSB  or  limits.  It  oust  also  be  stated  'lAilch 
failures  will  be  considered  relevant  and  ^Ich  are  not.  It  is  possible  to 
have  equipment  and  subsystem  fadlures  but  still  retain  mission  avallablHty. 

To  obtain  specific  performance  then,  requires  that  we  at  least  agree 
on  what  the  terms  sman  and  be  able  to  identify  responsibility.  "Naintain- 
ablHty"  as  an  engineering  science,  is  about  in  the  same  position  today 
that  "ReHablllty"  was  some  five  yesrs  ago.  At  that  time,  reHablHty  meant 
"something  tsrust-worthy"  or  "that  which  could  be  depended  on."  lAider  pres¬ 
ent  utage,  it  is  a  probablHty  statistic  defined  as:  "the  probability  that 
a  given  equlpsmnt  wlH  operate  in  a  satisfactory  manner  for  a  given  period 
of  time  in  its  stated  environment."  By  contrast,  "NalntainabiHty”  is  de¬ 
fined  in  NIL-STD-829  as  "The  ehaxmeterlstles  (both  qpaHtatlve  and  quanti¬ 
tative)  of  material  design  and  maintenance  resource  planning  which  make  it 
possible  to  awet  operational  objectives  with  minimum  expenditures  of  msdLn- 
tenance  effort  (manpower,  personnel  skill,  test  eq]alpment,  technical  data 
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maintenance  support,  facilities)  under  operational  environmental  conditions 
In  which  scheduled  and  unscheduled  maintenance  will  he  performed." 

This  puts  us  at  somewhat  of  a  disadvantage  in  trying  to  define 
contractually  what  we  are  looking  for  since  it  is  not  a  directly  measvirable 
Item.  However,  AFR  66-29  requires  that  Quantitative  Maintainability  Re¬ 
quirements  be  specified.  In  MIL-STD-829,  the  AF  has  defined  some  of  the 
terms  that  are  used  in  Maintainability.  Since  this  is  the  only  AF  docu¬ 
ment  we  have  at  this  time,  we  will  use  it  as  a  base  and  add  such  new  terms 
as  needed. 

Let  us  first  get  the  overall  perspective  as  to  where  maintainability 
fits  into  the  AF  weapons  system  and  then  we  will  break  out  the  major  con¬ 
siderations  into  their  cong>onents  and  allocate  responsibilities.  In  a  piece 
of  equipment  or  a  system,  it  is  fine  to  tadk  of  reliability,  maintainability 
or  availability  but  we  are  really  interested  in  "system  effectiveness" . 

That  is  the  probability  of  a  system  (or  equipments)  performing  its  mission 
when  operated  under  specified  conditions. 

This  can  be  traced  by  fig  1  (show  on  view  graph)  which  is  a 

modification  of  a  study  performed  by  *ARINC  for  the  Air  Force.  This  illus¬ 
trates  the  concepts  associated  with  system  effectiveness  and  the  time 
categories  involved.  When  possiblethe  time  category  is  shown  as  a  block 
and  its  concept  designation  is  shown  in  parenthesis.  This  type  of  desig¬ 
nation  is  used  only  where  time  is  "pvire" .  If  it  must  be  combined  with  some 
non-operating  time  category  (for  example  "availability"  is  a  probability 
involving  several  time  elements)  we  use  the  "concept"  name  only. 

Usual  relationships  are  shown  by  solid  lines,  and  special  types  of 
relationships  are  shown  by  dotted  lines.  The  combination  of  ewtive  repair 
time  and  operation  time  to  give  intrinsic  availability  is  shown  by  a  dotted 
line  for  two  reasons.  First,  improvement  in  this  charausterlstlc  must  be 
achieved  by  the  manufacturer,  since  it  is  primarily  concerned  with  built-in 
equipment  properties  —  assuming,  of  course,  that  the  user  is  staying  within 
design  limits.  In  the  second  place,  it  does  not  fit  easily  in  the  chain 
with  maintainability,  since  active  repair  time  is  involved  in  both  maintain¬ 
ability  and  intrinsic  availability,  >dille  operating  time  is  included  in 
intrinsic  availability  but  is  not  involved  in  maintainability. 

For  simplicity,  the  chart  omits  one  relationship  which  could  have 
been  shown  by  a  dotted  line  from  free  time  to  down  time.  This  would  have 
indicated  the  problem  arising  from  non- continuous  equipment  use.  Since  free 
time  does  not  exist  for  equipment  in  continuous  use,  a.  sli)q>le  chaining  of 
time  categories  is  possible  for  this  case.  However,  under  conditions  of 
intermittent  use,  there  is  a  chemce  that  down  time  may  overlap  free  time, 
thus  reducitig  the  degrading  effect  of  down  time  on  operationed  readiness 
and  hence  on  effectiveness. 


*AF  Contract  33(600)1*0259 
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Figure  1 


DEFUrailOBS  0?  CQHCEPTS 


System  Effectiveness  Is  the  prohablllty  that  the  system  caa  successfully 
meet  an  operational  demand  within  a  given  time  when  operated  under 
specified  conditions. 

Reliability  Is  the  probability  ihat  the  system  will  perform  satisfactorily 
for  al  least  a  given  period  of  time  when  used  under  stated  conditions. 

Mission  Reliability  Is  the  probability  that,  under  stated  conditions,  the 
system  will  operate  In  the  mode  for  ^Ich  It  was  designed  (l.e.,  with 
no  malfunctions)  for  the  duration  of  a  mission,  given  that  It  was 
operating  In  this  mode  at  the  beg^lnnlng  of  the  mission. 

Operational  Readiness  Is  the  probability  that,  at  any  point  In  time,  the 
system  Is  either  operating  satlsfsustorlly  or  ready  to  be  placed  In 
operation  on  demand  When  used  under  stated  conditions.  Including 
stated  allowable  warning  time.  Thus,  total  ceilendar  time  Is  the  basis 
for  coognitatlon  of  operatlonail  readiness. 

Operational  Application  -  The  probability  that  a  system  Is  used  In  the 
environment  for  'tAilch  it  has  been  designed. 

Availability  Is  the  probability  that  the  system  Is  operating  satlsfutorlly 
at  any  point  In  time  'tdien  used  under  stated  conditions,  where  the 
total  time  considered  Includes  operating  time,  active  repair  time, 
administrative  time,  and  logistic  time. 

Intrinsic  Availability  Is  the  probability  that  the  system  Is  operating 

satisfactorily  at  amy  point  In  time  when  used  under  stated  conditions, 
where  the  time  considered  Is  operating  time  and  active  repadr  time. 

Design  Adequacy  Is  the  probability  that  the  system  will  successfully  accom¬ 
plish  Its  mission,  given  that  the  system  is  operating  within  design 
specifications . 

Maintainability  (Operational)  is  the  probability  that,  when  maintenance 
action  Is  Initiated  under  stated  conditions,  a  failed  system  will  be 
restored  to  operable  condition  within  a  specified  total  down  time. 

Repalrablllty  Is  the  probability  that  a  failed  system  will  be  restored  to 
operable  condition  within  a  specified  active  repair  time  with  a  given 
manpower  expenditure. 

Serviceability  Is  the  degree  of  ease  or  difficulty  with  which  a  system  can 
be  repaired. 
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DEFINITIONS  OF  TIME  CATEGORIES 


Operating  Tine  Is  the  time  during  which  the  system  Is  operating  In  a  manner 
aee^table  to  the  operator,  althouc^  unsatisfactory  operation  (or 
failure)  Is  sometimes  the  result  of  the  Jud^pnent  of  the  maintenance 
man. 

Down  Time  Is  the  total  time  during  which  the  system  Is  not  In  acceptable 
operating  condition.  Down  time  can.  In  turn,  be  subdivided  Into  a 
number  or  categories  such  as  active  repsdr  time,  logistic  time,  and 
administrative  time. 

Active  Repair  Time  Is  that  portion  of  down  time  during  which  one  or  more 
technicians  are  working  on  the  system  to  effect  a  repair.  This  time 
Includes  preparation  time,  fault- location  time,  fault- correction  time, 
and  final  check-out  time,  for  the  system  and  perhaps  other  subdivi¬ 
sions  as  required  in  special  cases. 

Logistic  Time  Is  that  portion  of  down  time  during  which  repair  Is  delayed 
solely  because  of  the  necessity  for  waiting  for  a  replacement  part  or 
other  subdivision  of  the  system. 

Art^n^1^^istratlve  Time  Is  that  portion  of  down  time  uot  Included  imder  active 
repair  time  and  logistic  time. 

Free  Time  Is  time  during  >dilch  operational  use  of  the  system  Is  not  re¬ 
quired.  This  time  may  or  may  not  be  down  time,  depending  on  whether 
or  not  the  system  Is  In  operable  condition. 

Storage  Time  Is  time  during  idilch  the  system  Is  presumed  to  be  In  operable 
condition,  but  Is  being  held  for  emergency  —  l.e.,  as  a  spare. 
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AVAILABILm 


We  have  now  fitted  availability,  maintainability  and  time  Into  the 
overall  concept  of  aystem  effectlveneea .  Let  ua  now  look  at  theae  break- 
downa  Into  their  finer  aubdlvlalona.  "Availability"  baalcally  la  the  per¬ 
centage  of  time  the  equlpnent/ayatem  la  uaable,  taking  Into  Mcount  Its 
"Reliability"  .  (mTBF)  and  its  "operationaLL  Maintainability"  (MOT)  .  For  ESD 
purposes  In  the  real  world  we  must  be  more  specific  and  see  what  the  finer, 
more  detailed  divisions  are. 

We  have  Figure  2  (Time  Breakdown  of  Systems/Equlpnent) .  (Show  view 
graph)  Actual  quantification  examples  will  be  covered  by  the  next  speaker. 
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Availability  (Sometimes  referred  to  as  Operatic  x:iad  Availability)  - 
Probability  that  the  system  or  equlponent  Is  operatlixg  satlsfeicto- 
rlly  at  any  point  In  time  when  used  under  the  specified  conditions . 
This  Includes  all  down  time. 


Availability  (inherent)  =  The  probability  that  the  system  or  equip¬ 
ment  when  used  under  stated  conditions  In  an  Ideail  support  environ¬ 
ment  shall  operate  at  aoiy  given  time,  excludes  ready  time, 
logistic  time,  administrative  time. 


A.  =  MTBF  (operating  time  only) 

icffiP  f  RptIr  (active  time  only) 


You  will  note  now  that  we  have  modified  the  "downtime"  and  the  "up¬ 
time"  by  several  additional  time  subdivisions.  They  may  have  a  strong 
effect  on  the  probability  statistic. 

It  is  important  to  note  that  In  continuous  operating  systems  such 
as  moat  ESD  Comnand  and  Control  system^  preventive  amlntenamce  Is  •included  in 
downtime  (MDT)  as  well  as  corrective  madlntenance  and  nust  be  used  In  your 
calculations . 


IA-8 


(Fig  2) 


AMALTSIS  OF  DOWMTIME 


Afl^'tniatratlYe  Downtiae  or  Waiting  Time  -  Downtime,  other  than 
supply  downtime  during  which  work  Is  not  being  done  on  the  system. 

Active  Maintenance  Downtime  -  Ihe  time  during  which  work  Is  actually 
being  done  on  the  system/equipment  from  the  time  cf  recognition  of  an 
occurrence  of  failure  to  the  time  the  equipment  Is  back  In  operation  at 
Its  specified  performance  level.  Includes  both  preventive  and  corrective 
maintenance . 

Here  we  start  our  actual  maintenance  work.  This  Involves  the 
"detection"  that  the  operation  of  the  equipment/system  Is  unsatisfactory, 
to  "localize"  the  trouble  to  the  component  or  rack  Involved.  The  "Diagno¬ 
sis"  which  Is  the  determining  of  the  location  of  the  malfunction  :,he 
"Primary  maintenance"  (which  will  be  defined,  later),  'ireplacemenf^  or  the  part 
or  plug  In  unit.  '!re8t"of  the  equipment  and  going  back  on  the  air  and^check 
outJ^'  It  usually  takes  longer  to  localize  and  diagnose  the  trouble  than  It 
does  to  do  the  actual  repair. 

Supply  Downtime  or  Logistic  Downtime  -  That  time  during  \dilch  work 
Is  not  done  on  a  system  because  of  the  unavailability  of  a  needed  Item 
from  the  usual  supply. 

Total  Downtime  -  The  number  of  calendar  hours  that  a  system  Is  not 
available  for  use.  Including  time  for  active  maintenance,  both  corrective 
and  preventive;  supply  downtime,  due  to  unavailability  of  a  needed  Item; 
and  waiting  or  administrative  time,  during  which  work  Is  not  being  done 
on  the  system. 
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MMJIAIIIABILITY 


We  should  differentiate  now  between  "maintainability"-  the  eapabll- 
Ity  for  an  equlpaient  to  be  restored  to  condition  and  "winteiMLnce”  ^Ich 
is  the  work  done  on  the  equipment.  Malntsdxiablllty,  like  Reliability  is 
a  design  parameter. 

Design  for  Maintainability  -  Those  features  and  characteristics  of 
a  system/equipment  design  which  reduce  requirements  for  support  Including 
tools  and  test  equipment^  facilities,  spares,  training  and  highly  skilled 
persotmel  reqplred  to  perform  maintenance  and  which  liqprove  the  capability 
to  accept  maintenance  actions. 

These  Items  are  gone  Into  In  somewhat  greater  detsd.1  In  Section  3 
of  MIIi-M-26?12B.  This  specification  carries  considerable  weight  and 
should  be  Incorporated  Into  your  contracts  and  subcontracts.  To  assuze 
compliance  It  should  be  monitored  closely.  We  are  not  adverse  to  trade¬ 
offs  In  maintainability  but  we  do  want  them  documented. 

Ihese  factors  are  quite  Inclusive.  They  cover  the  equipment  proper, 
the  tools  and  test  equipment  to  support  It,  and  the  personnel  which  oper¬ 
ate  and  maintain  It. 

Keep  In  mind  that  by  designing  more  readily  maintainable  equipment 
and  alternate  modes  of  operation  (back  up  modes)  we  can  Improve  "Avail¬ 
ability"  . 
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MAINTEHAHCE 


Maintenance  -  All  actions  necessary  for  the  retaining  of  material 
In,  or  restoring"!!  to  serviceable  condition,  Including  servicing,  repair, 
modification, modernization,  overhaul.  Inspection,  condition  determination 
and  Initial  processing  of  support  Items. 

We  have  Figure  3  (Maintenance  Levels  and  Organization)  (Show  on 
View  Graidi)  which  covers  the  basic  breakdown  of  Air  Force  Maintenance 
activity.  In  essence  Air  Force  Maintenance  Is  based  on  the  three  echelon 
system:  "Organizational",  "Field",  and  "Depot".  By  the  Illustration  given 
we  can  see  the  organizations  Involved,  work  assigned,  personnel  assigned, 
and  points  of  operation. 
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MAUrrENAXCE  levels  abd  qrqabization 


Orgmizatlon  Work 
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(Fig  3) 
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At  site 
by  depot 
teams,  or 
at  Depots 


Personnel 


Repairmen, 
Operators 
Tech  Skills 
3  to  7 


Repedrmen 
Skill  Level 
3  to  7 


Contrutor 

personnel 

or 

ReiMdrmen 
Skill  Level 

3  to  7 


Maintenance  ( Organizational )  -  The  maintenance  which  a  iialng  organization 
performs  on  Its  own  aqiiipment  at  the  equipment  site  or  flight  line.  Con¬ 
sists  of  trouble-shooting  fvinctlons;  necessary  alignment,  calibration,  and 
performance  test;  prelaunch,  preflight  dally,  or  other  periodic  inspections; 
preventive  and  corrective  maintenance,  and  removing  and  replacing  compo¬ 
nents  . 

Maintenance  (Field)  -  The  maintenance  normally  performed  at  the  maintenance 
shop  located  at  the  equipment  site.  However,  It  may  be  necessary  to  perform 
field  maintenance  on  the  installed  equipment  or  flight  line  for  certain 
items  that  are  difficult  or  Impossible  to  remove  because  of  size  or  method 
of  installation.  Consists  of  the  bench  check  of  components,  repair  of 
unserviceable  parts;  accomplishing  technical  order  compliance  and  calendar 
inspection;  performing  functional  acceptance  checks  on  equipment  initially 
received  from  supply  sources;  and  testing,  calibration,  and  reclamation  as 
authorized. 

This  is  the  work  usually  done  by  the  maintenance  shop  at  the  main 
base  site.  Sometimes  it  is  done  by  mobile  repair  shops.  On  occasion,  due 
to  special  problems,  they  may  do  work  on  the  Installed  equipment.  Person¬ 
nel  are  part  of  the  using  command. 

Maintenance  (Depot)  -  That  maintenance  which  is  beyond  the  responsibility 
or  the  capability  of  the  using  command.  Involves  work  performed  on  mate¬ 
rial  requiring  major  overhaul  or  complete  rebuilding  of  components.  Nor¬ 
mally  accomplished  at  Air  Force  Logistic  Command  facilities  or  commercial 
maintenance  shops,  but  sometimes  performed  in  the  field  by  depot  mainte¬ 
nance  teams.  This  is  the  work  usually  performed  by  the  AFLC  Depots  and 
corresponds  to  5th  echelon  maintenance  in  Army  units.  It  is  supposedly 
capable  of  complete  rebuilding  of  equipments.  Frequently,  this  is  con¬ 
tractor  maintenance. 

Repair  Facilities  -  Let  us  consider  now  the  AF  Maintenance  Organizational 
set  up.  Basically,  it  is  performed  in  3  echelons  namely  Organizational, 
Field,  and  Depot.  Before  going  into  the  MIL-STD-829  definitions,  I  would 
like  to  analyze  what  wo  expect  from  ’’Maintenance . "  This  involves  ’’all 
actions  necessary  for  the  retaining  of  material  in,  or  restoring  it  to  a 
serviceable  condition.  Maintenance  includes  servicing,  repair,  modifica¬ 
tion,  modernization,  overhaul,  inspection,  condition  determination,  and 
initial  provisioning  of  support  items.”  You  will  note  that  this  incl\ades 
preventive  maintenance  ("retaining  of  materiel")  and  corrective 
maintenance  ("Restoring  it  to  a  serviceable  condition"). 

I’d  like  to  bring  in  here  two  variations  on  the  basic  definitions 
by  adding:  "Primary  Maintenance"  -  "The  technique  of  performing  a  mainte¬ 
nance  action  in  minimum  time  without  isolating  the  specific  cause  of 
failure."  For  example:  replacing  a  defective  plug-in  unit.  "Secondary 
Maintenance"  which  is  defined  as  "a  maintenance  action  on  the  replaceable 
unit  to  restore  the  unit  to  specified  performance."  This  is  usually  done 
away  from  the  original  equipment  as  a  bench  operation.  Considerably  more 
equipment  (test,  etc.)  is  usually  required.  Frequently,  this  is  beyond 
the  scope  of  "Organizational  maintenance." 
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Total  Maintenance 


a.  " Prevent Ive  Maintenance*'  -  ^Diat  maintenance  performed  to  main¬ 
tain  a  eyatem  or  equipment  In  astl-sfaetory  operational  condition  "by  pro¬ 
viding  syetematlc  Inapectlon^  detection  and  correction  of  Incipient 
failures  before  they  occur  or  develop  Into  major  failures.  Keep  In  mind 
that  this  means  "downtime"  Just  as  much  as  when  we  refer  to  "corrective 
maintenance"  of  operating  equipment  but  we  call  this  "scheduled  downtime" 
In  standby  equipment  this  does  not  affect  availability.  We  may  replace 
parts  still  functioning  In  a  satisfactory  manner  because  of  schedule 
replacement,  or  because  marginal  testings  has  Indicated  trouble  may  be 
near.  P.M.  Is  substitute  for  Improved  reliability  or  quality  but  It  does 
not  Inqffove  reliability  of  Itself.  It  does  help  to  Improve  "operatloncQ. 
readiness". 

b.  "Corrective  Maintenance"  -  That  maintenance  performed  on  ein  un¬ 
scheduled  basis  to  restore  equipment  to  a  satisfactory  condition  by  pro¬ 
viding  correction  of  a  failure  idilch  has  caused  degradation  to  the  eqvilp- 
ment  below  Its  specified  performance.  Here  are  the  repairs  to  equipment 
which  has  failed  or  malfunctioned.  It  Involves  use  of  madntenance  person¬ 
nel  as  distinguished  from  adjustments  idilch  can  be  performed  by  the  oper¬ 
ator  such  as  frequency  drlft>  correction,  etc.  Within  the  concept  of 
corrective  maintenance,  redundancy  can  be  considered.  In  general,  there 
Is  a  "switchover  redundancy"  In  which  a  fadlure  Is  compensated  for  by 
another  vinit  being  put  Into  service,  "switchover  standby  redundancy", 

and  "priority  redundancy"  •vAiere  the  second  unit  Is  In  operation  at  all 
times.  In  some  of  our  systems,  we  have  redundancy  on  a  priority  basis  In 
which  some  equipment  which  In  use  may  be  used  to  carry  on  the  prime  Job. 

HOTS:  All  maintenance  time  should  be  logged  In  with  proper  breakdown 
given.  AfM  66-1  Is  the  bulc  mauiual  covering  Air  Force  procedures.  This 
Is  being  modified  for  Electronic  Systems  reporting. 

Effective  Maintenance  Time  -  (See  Fig  k)  (Show  on  View  Grai^) 
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Effective  Maintenance  -  The  cusulatlve  eunmatlon  of  (but  not 
limited  to)  all  the  time  spent  by  madntenance  people  In;  preparing  equip¬ 
ment  for  maintenance,  testing  and  Inspecting  to  Isolate  faulty  components 
and  systems,  performing  scheduled  or  unscheduled  removal,  replacement  and 
repair  of  systems  and/or  coag>onents,  maintaining  and  operating  ancillary 
equipment  associated  with  the  end  article*  This  nmlntenance  does  not  In¬ 
clude  logistic  time  lost  from  actual  maintenance  due  to  delays  caused  by 
lack  of  parts  and  components.  It  does  not  Include  administrative  time  by 
maintenance,  accounting,  clerical,  and  supervisory  personnel. 


Time 


(Pig  It) 


Note  the  above  Is  active  time.  It  does  not  Include  admin  time 

or  supervisory  personnel  unless  actively  engaged  In  maintenance 
vorke 


An  important  point  however  in  our  work  at  ESD  is  that  our  systems  (C&C) 
generally  call  for  continuous  operation  and  frequently  have  redundant 
equipment  sections  or  subsystems.  Perhaps  we  need  a  few  new  definitions 
to  cover  these  conditions  to  help  analyze  what  we  caui  expect  in  operations. 


^  ^  For  "msslon  Availability",  we  define  It  as  the  probability  that  a 
stated  percentage  of  missions  of  time  duration  "T"  will  not  have  any  fail¬ 
ure  in  any  mission  \*lch  can  not,  throufji  repalrablllty,  be  restored  to 
service  in  a  time  equal  to,  or  less  than  the  time  constraint  "t" . 
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For  "Equipment  Availability"  -  The  probability  that  a  stated 
percentage  of  equipment  will  be  available  for  use  at  time  "T"  due  to 
the  combined  effect  of  the  survivors  and  units  restored  to  service 
through  repairability,  in  a  time  eqtjal  to,  or  less  than,  the  time 
constraint  "t . " 

By  use  of  these  definitions,  we  can  now  develop  the  mathematical 
relationship  between  Rellablllty-Ps,  Equipment  Avallability-^£  ,  and 
Mission  Availability  . 


(l)  T  =  time,  hr 

These  will  be  developed  by  the  next  speaker  but  the  graph 

illustrates  the  relationship  of  "Maintainability (Operational) "  to  « 

improving  the  P  . 
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(l)  Chart  and  definitions  from  1  Atch 

Reliability  Principles  and  Practices  MIL-STD-829 

by  S.R.  Calabro  (McGraw-Hill) 


QUANTITATIVE  MEASURES  OF  MAINTAINABILITY 
S.  R.  CALABRO 

AEROSPACE  ELECTRONICS  TECHNOLOGY,  INC. 


SUMMARY 

This  paper  stresses  the  importance  of  specifying  maintainability  in  a  quantitative 
manner,  and  compares  the  advantages  of  doing  this  over  past  qualitative  descriptions.  It 
also  includes  the  mathematical  models  which  are  used  for  time  availability,  mission  avail¬ 
ability,  and  equipment  availability.  The  importance  of  the  time  constraint  is  also  stressed 
and  a  nomograph  which  facilitates  trade-offs  between  maintainability  and  reliability  is 
explained. 

In  the  past,  many  of  the  definitions  of  maintainability  were  qualitative  in  nature. 

As  an  example,  a  typical  Department  of  Defense  definition  states  that: 

"Maintainability  is  a  quality  of  the  combined  features  and 
characteristics  of  equipment  design  which  permits  or  enhances 
the  accomplishment  of  maintenance  by  personnel  of  average 
skill  under  natural  and  environmental  conditions  under  which 
it  will  operate" . 

It  is  obvious  that  such  qualitative  definitions  are  subject  to  various  interpretations, 
and  because  of  this,  quantitative  definitions  have  been  developed.  For  example,  a  cur¬ 
rent  definition  of  maintainability  is: 

1  .  .  . 

"Maintainability  is  the  probability  that  a  device  can  be  re¬ 
stored  to  operational  effectiveness  within  a  given  period  of 
time  when  the  maintenance  action  is  performed  in  accord¬ 
ance  with  prescribed  procedures". 


Another  quantitative  definition  is  that  of  repairobility  in  MIL-STD-829  (USAF): 

"Repairability  is  the  probability  that  a  system/equipment  will 
be  repaired  once  started,  in  a  given  period  of  time  with  a 
given  manpower  expenditure". 


It  should  be  noted  that  both  these  definitions  assess  the  probability  of  the  mainten¬ 
ance  actian  being  performed  within  a  given  period  of  time.  This  time  interval  has  been 
labelled  the  "time  constraint".  This  is  an  important  concept  because  it  puts  a  time  limi- 
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Tlie  definition  of  maintainability  is  a  quote  from  "Reliability  Principles  and 
Practices",  Page  113,  by  S.  R.  Calabro,  published  by  McGraw-Hill  Book 
Co. 
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tation  on  the  maintenance  activity  which  is  necessary  to  achieve  mission  success. 

If  we  assume  that  repair  time  is  exponentially  distributed,  it  facilitates  the  devel¬ 
opment  of  the  quantitative  measure  of  maintainability .  Despite  arguments  to  the  contrary 
wherein  it  is  claimed  that  the  exponential  is  not  the  proper  distribution  to  use,  since  the 
limit  of  all  distributions  is  the  exponential,  its  use  is  within  the  acceptable  limits  of  ac¬ 
curacy  for  prediction  techniques.  This  is  no  different  than  the  practice  which  has  been 
successfully  used  in  reliability  prediction  techniques,  despite  the  fact  that  in  some  in¬ 
stances,  the  exponential  is  not  completely  applicable. 

If  the  mean  time  to  repair  is  labelled we  can  express  the  probability  of  perform¬ 
ing  zero  repairs  in  time  t  as  exp  (-t/p).  Therefore,  the  probability  of  performed  one  or 
more  repairs  In  time  t,  or  the  repalrability  Is  the  unity  complement,  namely: 

R  =  1  -  e  (1) 

Since  the  reciprocal  of y  represents  the  repair  rate  u  expressed  in  terms  of  number 
of  repairs  per  hour,  the  repalrability  equation  can,  therefore,  be  expressed  In  terms  of 
u,  instead  of^,  as: 


Having  established  the  repalrability  equation,  it  should  now  be  a  relatively  simple 
task  to  predict  the  maintainability  of  a  device  once  the  time  constraint  and  mean  time  of 
repair  have  been  established.  The  mean  time  of  repair  is  dependent  on  at  least  the  fol¬ 
lowing:  the  maintenance  discipline  which  will  be  employed;  the  qualifications  and  train¬ 
ing  of  maintenance  personnel;  and  the  types  of  tools  and  test  equipment  which  will  be  used. 
All  of  these,  in  turn,  being  a  function  of  any  cost  limitations. 

Moreover,  these  factors  have  a  bearing  on  the  time  it  will  take  to  diagnose,  local¬ 
ize,  and  repair  a  failure.  For  example,  if  the  maintenance  discipline  prescribes  that 
failures  will  be  repaired  at  the  part  level,  we  will  obtain  a  different  repair  time  than  If 
pluggable  or  throwaway  replacements  are  specified. 

When  protypes  are  involved  in  a  contract,  the  mean  time  of  repair  can  be  deter¬ 
mined  as  illustrated  in  the  following  example. 

Example:  Data  from  a  reliability  test  were  collated  and  tabulated  below. 
Calculate  ^  and  u.  What  is  R  expressed  in  per  cent  for  I  hr?  2  hr?  10  hr?  What  con¬ 
clusions  con  be  drawn  from  the  calculated  results? 

Solution.  Raw  data  were  re-arranged  as  shown.  Column  1  shows  the  num¬ 
ber  of  times  that  a  repair  action  occurred,  with  o  duration  as  indicated  in  Column  2.  The 
totals  for  each  Column  are  shown.  The  mean  repair  time  ^  is  the  ratio  of  the  sum  of  Col¬ 
umn  3  to  the  sum  of  Column  I . 

1 

See  example  9-1  "Reliability  Principles  and  Practices"  by  S.  R.  Calabro, 

published  by  McGraw-Hill  Book  Co.,  Page  121. 
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(1) 

(2) 

(3) 

Frequency  of  occurrence 

Duration  of  each  main¬ 
tenance  action  in  hours 

Product  of  Columns 

1  and  2 

2 

1 

2 

4 

2 

8 

7 

3 

21 

13 

4 

52 

16 

5 

80 

16 

6 

96 

24 

7 

168 

10 

8 

80 

6 

9 

54 

4 

10 

40 

3 

11 

33 

1 

12 

12 

106 

Total  number 
of  occurrences 

78 

646 

Total 

maintenance  hours 

*  These  data  were  rounded  off  to  the  nearest  hour  merely  to  simplify 
calculations. 


u  = 


646  =  6.09  hr. 

106 

-jp  ~  6-09  repairs  per  hour 


Substituting  in  equation  (1): 

R  (1  hr)  =  1  -  e  =  15  per  cent 

-2(0.162) 

R  (2  hr)  =  1  -  e  =28  per  cent 

R(10hr)  =  1  -  =  80  per  cent 


The  results  highlight  the  obvious  fact  that  for  a  given  repair  rate,  the  greater  the 
value  of  t,  the  greater  the  probability  of  repair. 

If  no  prototypes  are  available  or  if  testing  time  is  limited,  the  repdirability  may  be 
predicted  by  simulating  each  repair  action  step  by  step  in  a  manner  similar  to  time  and 
motion  study  techniques.  A  wooden  mock-up  may  be  used  for  this  purpose  or  applicable 
time  and  motion  study  time  units  for  various  skill  levels. 
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The  next  example  features  a  typical  repairability  prediction  at  the  component  level. 

^  Example:  A  radio  receiver  consists  of  5  components,  namely:  power  supply, 
R-F  stage.  Mixer,  l-F  stage,  and  Power  Output  stage.  The  failure  rate  for  the  entire 
receiver  was  predicted  to  be  176.37  per  cent  failures/1000  hr. 

(a)  Estimate  the  value  of  the  mean  time  between  failure,  m  and  repair 
rate,  u  for  the  receiver  if  the  replacement  times  for  each  component  are  equal  and  0. 1 
hour  in  duration. 


(b)  Estimate  the  value  of  ^  and  u  if  the  failure  rates  of  each  compon¬ 
ent  expressed  in  terms  of  per  cent  per/1000  hr  are  respectively  15.28,  40.28  ,  33.58, 
54.34,  and  32.89,  and  the  estimated  replacement  times  for  each  component  in  hours  are 
respectively  0. 1,  0.15,  0.2,  0.3,  and  0.4. 

Solution. 

(a)  m  =  1  =  567  hr 

0.0017637 

Since  the  replacement  times  for  each  component  are  equal,  their  relative  frequen¬ 
cy  of  failure  is  not  considered  and,  therefore,  the  replacement  time  of  0. 1  hr  is  the  mean 
repair  time  of  the  receiver  The  repair  rate  of  the  equipment  u^  is: 

Ug  =  1  =  1  =  10  repairs  per  hr. 

0.1 

(b)  When  the  replacement  times  are  not  equal  for  each  component, 
we  must  first  tabulate  the  data  as  shown  in  the  following  table.  Assume  a  mission  time 
Tof  1000  hrs. 


^  See  example  12-2  "Reliability  Principles  and  Practices"  by  S.  R.  Calabro, 
McGraw-Hill  Cook  Co.,  Page  219. 
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TABULATION  OF  DATA 


- ^35 - 

Nomen¬ 

clature 

Probability  of 
failure  of  each 
component  in 
time  T. 

Relative 

failure 

frequency 

Estimated  com¬ 
ponent  replace¬ 
ment  timey  hr 
c 

Product  of 
columns 

3  and  4 

Pf  =  1-e 

PS 

0.148 

0.148  *  0.101 
1.463 

0.1 

0.0101 

R-f 

0.330 

0.330  =  0.225 
1.463 

0.15 

0.0337 

Mixer 

0.286 

0.286  =  0.196 
1.463 

0.20 

0.0392 

l-f 

0.417 

0.417  *  0.285 

0.30 

0.0855 

PO 

0.282 

0.282  =  0.193 
TT463 

0.40 

0.0772 

if  *  1.000 

^fyc 

=  0.2457 

where:  f  =  frequency 

pQ  =  mean  time  to  repair  component 
Ng  =  total  number  of  repair  actions 


e. ,  in  this  case  the  sum  of  the 
relative  frequencies  which  is  un 


«  \ 

Uy) 


Substituting  we  get:  =  0.2457  =  0.2457 

1 


and  u  =  1  =  1  =  4.48  repairs  per  hour 

0457 
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The  foregoing  example  represents  a  simplified  version  of  the  basic  techniques  which 
con  be  used  to  predict  mean  time  to  repair. 

It  must  be  realized,  however,  that  many  more  factors  must  be  considered,  all  of 
which  have  an  effect  on  p.  RCA  is  currently  working  on  a  contract  with  the  Rome  Air 
Development  Center,  which  although  following  similar  prediction  ideas,  is  much  more 
sophisticated  and  detailed.  It  is  expected  that  this  study  will  odd  significantly  to  quan¬ 
titative  measurement  techniques  for  maintainability. 

Once  having  determined  or  predicted  the  mean  time  to  repair;  and  the  failure  rate  it 
now  becomes  possible  to  express  availability  quantitatively.  The  most  familiar,  but  by 
no  means  the  only  measure  of  availability,  being  the  up  time  ratio  (UTR).  The  UTR  is 
the  ratio  of  the  mean  time  between  failure  (MTBF)  to  the  sum  of  the  MTBF  and  mean  down 
time. 

It  can  also  be  expressed  in  terms  of  u  and  r  as  follows: 


There  are  two  other  measures  of  availability  which  should  be  of  some  interest. 

These  are  mission  availability  and  Equipment  or  Product  availability. 

"Mission  availability  is  the  probability  that  a  stated  number  of  missions  of  time  dura¬ 
tion  T  will  not  have  any  failure  in  any  mission  which  cannot,  through  maintcjinability,  be 
restored  to  service  in  a  time  equal  to,  or  less  than,  the  time  constraint  t" . 

"Equipment  availability  is  the  probability  that  a  stated  percentage  of  equipment  will 
be  available  for  use  at  time  T  due  to  the  effect  of  the  survivors  and  units  restored  to  ser¬ 
vice  through  maintainability  in  a  time  equal  to,  or  less  thon,  the  time  constraint  t".  ^ 


The  mathematical  expressions  for  these  two  forms  of  availability  are  respectively: 


A 


(3) 


A-ut  ~*’T 

g  =  1  -  e  (1  -  e  )  (4) 

1 

See  pages  125  and  126,  "Reliability  Principles  and  Practices  by  S.  R. 
Calabro,  published  by  McGraw-Hill  Book  Co. 
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Figure  1  shows  the  curves  for  probability  of  survival,  P^,  when  no  maintainability  is 

practiced,  and  Mission  and  Equipment  availability  when  u  =  4,  t  =  0.25  hr  and  r  =  0.001 
fph. 


It  should  be  noted  that  the  Pj  curve  approaches  zero  at  a  much  faster  rate  than  the 
mission  availability  curve, This  is  due  to  the  fact  that  those  missions  which  have 
no  failure  exceeding  0.25  hours  in  duration  are  considered  to  be  a  success.  It  should  be 
obvious,  therefore,  that  the  greater  the  time  constraint  which  can  be  permitted,  the  more 
the  economy  and  greater  the  success  of  missions  so  defined. 

The  Equipment  .availability  curve  never  approaches  zero  because  as  the  mission  time 
approaches  infinity,  the  probability  of  survival  of  original  units  approaches  zero,  and 
therefore,  the  percentage  of  survivors  with  failures  not  exceeding  more  than  t  hours  to 
repair  approach  a  limiting  value  as  an  assymptote  and  equation  4  becomes  the  maintain¬ 
ability  equation 

M  =  1  - e 

1 

Figure  2  shows  a  nomograph  which  is  a  very  useful  tool  for  the  designer.  Through  its 
use,  for  a  required  equipment  availability,  he  can  trade  off  between  reliability  and  main¬ 
tainability. 

It  consists  of  three  scales.  The  extreme  left-hand  scale  plots  the  average  number  of 
failures  rT  which  product  is  symbolized  as  d.  Similarly  b  =  ut  on  the  right-hand  scale  is 
representative  of  the  overage  number  of  repairs  which  can  be  performed  in  time  t  for  a 
given  value  of  u. 

Thus  for  a  required  value  of  A  £  ,  o  compromise  can  be  made  between  the  most  econ¬ 
omically  values  of  b  &  d,  which  will  provide  the  availability.  This  also  determines  the 
failure  rate,  r,  and  repair  rate,  u,  once  the  mission  time,  T,  and  time  constraint,  t, 
have  been  determined  by  mission  requirements. 

For  small  values  of  d  /A  ^  and  are  approximately  equal  (see  figure  1).  For 
larger  values,  a  similar  nomograph  con  be  constructed  for  A 


See  page  133,  "Reliability  Principles  and  Practices",  by  S.  R.  Calabro, 
published  by  McGraw-Hill  Book  Co. 
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Ftg.  2.  Nomograph  »howlng  r»larte«hip  bohroon  ,  A  g,  j  and  b. 


Fig.  1,  Relation»hipb«fw««nAand  Pj.  Availability 
Olid  probability-of-survivoi  curvot.  u  ■  4,  t  ^  0.25  hr, 
r  ■0.001  fjph. 
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SUMMARY 


The  preparation  of  adequate  Reliability^  Maintainability 
and  Availability  requirements  Involves  the  careful  consideration 
of  the  fom  presents  Its  ovm  potential  problems  and  these  must  be 
anticipated  at  the  time  the  contractual  documents  are  prepared. 
Disputes  between  the  Air  Force  and  the  contractor  can  be  avoided 
by  careful  preparation  of  requirements  and  such  care  will  repay 
Its  cost. 

INTRODUCTION 

Air  Force  experience  with  Reliability,  Maintainability  and 
Availability  requirements  (R8M  reqixlrements )  has  revealed  the 
recurrence  of  various  problems  which  may  be  avoided  by  proper 
clarification  of  the  requirements  In  the  contractual  documents. 
This  paper  will  deal  with  the  documentation  of  RAM  requirements 
and,  hopefully,  will  help  the  reader  to  minimize  his  future  R&M 
contractual  problems. 

AGENCIES  INVOLVED 


Although  the  procuring  activity  designated  by  the  Air  Force 
Is  directly  responsible  for  documenting  contractual  R&M  require¬ 
ments,  both  the  using  agency  and  a  technical  office  specializing 
In  R&M  should  also  be  Involved.  The  needs  of  the  user  are,  of 
course,  of  primary  liiq;>ortance  and  must  be  considered  In  formu¬ 
lating  R&M  requirements.  It  Is  the  Job  of  the  R8M  specialists  to 
advise  the  procuring  activity  cf  the  best  approach  to  satisfy  these 
needs  under  the  time  money  and  manpower  constraints  Imposed  on  the 
procurement.  The  results  of  the  efforts  of  all  thjree  agencies 
should  then  be  an  appropriate  and  realistic  contractual  requirement 
these  properties  will  be  established  by  the  form  and  magnitude  of 
the  requirement. 
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COMtCN  FORMS  OF  B&M  RBQUIMMayrS 


a.  MTBF 

Tbe  requirement  form  most  often  employed  has  been  Mean 
Time  Betveen  Fallurea  (MTBF);  this  la  the  moat  appropriate  form 
for  procurement  on  tbe  equipment  (rather  than  ayatemi)  level. 

The  moat  frequent  dlapute  arlalng  from  the  uae  of  thla  form  la 
over  the  definition  of  fallvire.  A  contractor  will  often  requeat 
that  fallurea  of  certain  parta,  such  m  pilot  lights,  monitor 
circuitry,  etc.  not  be  counted  against  the  equipment  during 
reliability  demonstration.  The  acceptability  of  such  a  requeat 
should  be  established  when  the  requirement  la  written;  It  may 
be  decided  to  permit  such  a  procedure.  As  a  general  rule,  however, 
failure  should  be  defined  as  aoy  departure  from  specified  perform¬ 
ance.  If  a  pilot  light  la  specified,  failure  of  that  light  should 
be  counted  against  the  equipment.  Meuoy  disputes  will  be  eliminated 
If  this  point  Is  established  In  advance. 

b.  MPR 

Maintainability  must  be  also  specified  and  a  Mean 
Time  to  Repair  (MTR)  requirement  should  accompemy  the  MEBF 
requirement.  On  the  same  subject,  a  quantitative  requirement 
defining  an  acceptable  preventive  malntensmce  period  should  be 
also  clearly  established. 

c. 

Although  MTBF  and  MTR  eoe  sometimes  utilized  for  system 
procurements,  availability  requirements  are  more  common.  These 
requirements  Invoke  their  own  problems.  The  first  question  that 
must  be  answered  by  the  procurement  documents  Is,  simply,  "when 
is  the  system  considered  available?”  This  may  be  when  every 
component  i  available  or  when  a  certain  minimum  number  Is  avail¬ 
able.  Either  way  Is  acceptable,  depending  on  the  particular  system 
involved,  and  both  have  been  used  in  different  Air  Force  procurements. 
The  form  desired  must,  however,  be  stated  In  the  procurement  document, 
and  when  appropriate,  the  minimum  number  of  components  necessary  for 
system  availability  must  be  stated. 

Another  problem  with  availability  Is  the  definition  of 
component  availability.  The  usual  formula  for  availability  Is: 

A  -  MTBF 

MTBF  +  MTR 

i 

However,  MTR  does  not  inclvtde  preventive  maintenance  time  and  It  is 
sometime  replaced  In  the  formula  by  Mean  Down  Time  (MDT)  .  Again 
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either  tern  may  he  acceptable,  but  the  desired  one  must  be  clearly 
specified.  It  should  also  be  noted  that  the  use  of  MTEF  In  the 
formula  requires  a  definition  of  component  failure. 

d.  Effectiveness 

Finally,  the  use  of  various  measures  of  effectiveness  Is 
possible.  These  measures,  which  Include,  for  exasqple,  kill  prob¬ 
ability,  incorporate  R&M  requirements  with  performance  criteria 
in  an  overall  specified  probability  of  system  success.  While  this 
is  a  worthwhile  endeavor  it  requires  extreme  care  in  its  use.  Sys¬ 
tem  effectiveness  is  dependent  on  operating  environment  and  thus 
the  requirement  must  be  based  on  a  given,  even  if  con^letely  hypo¬ 
thetical  environment.  In  addition,  all  the  factors  affecting  system 
effectiveness  must  be  demonstrable  as  the  confidence  in  the  achieve¬ 
ment  of  the  required  effectiveness  can  be  no  greater  than  the  confi¬ 
dence  obtained  for  the  achievement  of  the  least  measurable  factor. 

SELECTING  THE  MAGNITUDE  OF  THE  REQUIREMENT 


Once  the  form  of  the  requirement  is  established,  a  figure  must 
be  selected.  This  figure  must  never  be  less  than  that  obtainable 
without  special  effort  tinder  the  existing  State  of  the  Art.  Even 
"off  the  shelf"  equipment  should  never  be  permitted  to  possess  less 
reliability  than  its  complexity  indicates  is  within  a  normal  capa¬ 
bility.  Selecting  requirements  for  this  type  of  equipment,  as  well 
as  determining  the  magnitude  of  effort  required  to  meet  the  needs 
of  the  user  in  any  procurement,  requires  some  measure  of  the  exist¬ 
ing  State  of  the  Art.  The  following  are  three  methods  employed  by 
RADC  as  indicators  of  the  State  of  the  Art  in  equipment  reliability. 

a.  Previous  Equipment 

The  most  obvious  indicator  of  the  State  of  the  Art  in  re¬ 
liability  is  that  achieved  by  previous  equipments.  For  this  reason, 
reliability  figures  available  to  RADC  are  filed  and  consulted  as 
necessary.  Shortcomings  of  this  method  are  that  not  all  equipment 
experience  finds  its  vay  to  the  files,  statistical  significance  of 
data  received  is  often  undeterminable  and  the  degree  of  similarity 
between  existing  and  proposed  equipments  may  be  questionable.  This 
method  should,  therefore,  be  utilized  with  caution. 

b.  Copglexlty  Formulas 

Another  approach  employed  by  RADC  to  determine  a  State  of 
the  Art  figure  is  the  use  of  formulas  relating  equipment  failure 
rate  to  its  parts  count.  Formulas  have  been  developed  for  radar 
and  coomunlcatlons  equipment  and  for  data  processing  equipment. 

The  former  is  presented  in  specifications  MIL-R-26474  and  MIL-R- 
27070  as  a  means  for  determining  quantitative  requirements  when  no 
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operational  requirement  le  stated  In  the  other  procurement  documents. 
Drambacks  to  the  method  Include  the  fact  that  the  parts  complement 
Is  usually  not  available  before  procurement  of  the  equipment  and 
thus  the  fonsulsuB  Indication  of  the  State  of  the  Art  cannot  be 
checked  against  the  users  needs  before  the  procurement  action  begins . 

c.  Prediction  bv  Function 

The  latest  measure  of  the  State  of  the  Art  In  reliability 
under  development  by  RADC  Is  tliw  prediction  of  reliability  by  equip¬ 
ment  function.  This  method  will  permit  the  prediction  of  the  reli¬ 
ability  achievable  In  an  equipment  by  State  of  the  Art  methods  from 
an  examination  of  the  major  fxmctlons  of  that  equipment.  For  example > 
current  studies  relate  the  MTBF  of  a  pulsed  radar  to  Its  peak  power 
output.  Publication  of  this  method  Is  Immanent  auid  It  will  provide 
the  procuring  activity  with  a  valuable  tool  for  establishing  realistic 
reliability  figures  in  the  future. 

OTHER  FACTOBS  TO  BE  GOMSIDERED  IN  1X)CUMENTING  BEQiUlKEMENTS 

It  should  now  be  obvious  that  a  definition  of  failure  must  be 
established  at  the  time  the  requirements  etre  documented.  On  this 
problem  are  hinged  most  of  the  disputes  between  contractors  and  the 
Air  Force  about  B&M  requirements.  Other  Items,  however,  also  cause  dif¬ 
ficulties,  and  some  of  these  Items  are: 

a.  Requirements  vs.  Goals 

The  specified  figures  are  B&M  requirements  not  goals . 

It  would  be  most  helpful  if  contractors  would  cease  changing  these 
words  in  the  contrs^ctual  documents  they  prepeoe.  Cases  have  existed 
where  four  successive  versions  of  a  contractor  generated  specification 
have  labelled  B&M  requirements  as  goals  despite  repeated  rejection 
by  the  Air  Force.  The  only  way  to  correct  this  situation  Is  for  the 
Air  Force  to  stamd  firm  on  calling  a  requirement  a  requirement  until 
the  contractors  are  convinced  that  it  is,  indeed,  a  requirement. 

b.  Unrealistic  Requirements 

A  requirement  does  not  have  to  be  too  lenient  to  be 
unrealistic.  One  Air  Force  system  even  now  possesses  a  requirement 
for  operation  "24  hours  a  day,  365  days  a  year."  This  requires  per¬ 
fection  and  such  requirements  are  generally  as  enforceable  as  no 
requirements  at  all.  (The  system  In  question,  fortunately,  has  been 
subjected  to  a  thorough  reliability  program  and  hence  has  not  been 
cause  for  alarm.  However,  the  Air  Force  could  have  been  In  serious 
difficulties  In  enforcing  this  requirement  If  the  contractor  did 
not  accept  its  Intent.) 

c.  Follow-up  Requirements 
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It  Is  not  sufficient  to  specify  only  the  B&M  requlreuents . 
It  must  be  clearly  required  for  the  contractor  to  pursue  an  active 
program  for  achieving  these  requirements.  This  program  should 
Include  design  guidance  and  review,  prediction  and  verification  of 
achievement.  There  must  be  sufficient  documentation  for  the  Air 
Force  to  monitor  program  progress.  It  Is  well  to  remember  that  the 
contractor  must  deliver  only  those  items  specified  regardless  of 
cuiy  verbal  promises  to  do  better. 

d.  Verification 

The  demonstration  of  achievement  of  the  B&M  requirements 
must  be  specified.  Such  demonstration  Is  costly  and  time  cons\nnii3g; 
without  It,  however,  any  B&M  problems  with  the  equipment  must  be 
corrected  In  the  field  after  the  contractor's  liability  has  ended. 
This  Is  far  more  costly  and  time  consuming.  There  are  many  ways 
for  demonstrating  reliability  with  varying  degrees  of  confidence. 

The  advice  of  a  B&M  specialist  In  determlng  the  tests  to  be  reqiilred 
would  be  of  great  value.  On  this  point.  It  should  be  stressed  that 
the  method  of  test  must  be  compatible  to  the  requirement.  If,  for 
example,  the  requirement  la  computed  on  the  basis  of  a  peurts  co\mt, 
then  the  falliire  of  any  part  on  the  list  must  be  counted  regEmdless 
of  the  actual  effect  on  equipment  perfommince. 

CONCLUSION 


The  reader  should  not  conclude  from  the  preceding  discussion 
that  contractors  should  not  be  trusted.  He  should,  however,  realize 
that  the  Air  Force  has  a  right  to  Insist  on  delivery  of  only  those 
Items  specified  In  the  contractual  documents.  In  addition,  any 
Items  not  clear  or  well  defined  may  result  In  disputes  which,  however 
settled,  do  not  benefit  either  the  contractor  or  the  Air  Frarce  in  the 
long  run.  It  Is  far  better  to  spend  days  In  prepeuratlon  of  a  clear, 
appropriate  and  realistic  requirement  than  to  risk  montha  of  dispute 
and  a  final  unsatisfactory  solution.  If  the  reader  will  do  no  more 
than  apply  some  extra  thought  to  the  preparation  of  the  next  require¬ 
ment  with  which  he  is  Involved,  this  paper  will  have  been  worth  its 
presentation. 
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AFSC  MA1N1AINABILI17  POLICY 


Major  WlUlaa  P.  Cruqpaoker 
Hq  AFSC 


By  now  there  ehonld  be  little  doubt  by  anyone  that  Maintainability  (M) 
is  essential  if  our  systesis  are  to  be  effeetlre.  M  is  a  definite  requlx^ 
ment  that  cannot  be  brushed  aside  or  glvan  just  lip  service.  It  is  not 
going  to  go  away.  Close  monitoring  beginning  at  DQD  is  a  reality.  Mon- 
ocnplianee  at  any  level  is  a  risky  venture.  Past  records  and  data  frcn 
reporting  systems  such  as  AHK  66-1  and  AFM  65-110  show  the  tremendous  iiqpact 
of  poor  M.  As  our  systems  become  more  complex,  and  they  will,  it  doesn't 
take  nucli  forecasting  to  show  that  they  may  beocme  virtually  impossible 
to  maintain  so  as  to  meet  availability  requlraaents  and  aocoepllsh  their 
mission.  As  far  as  costs  go,.  It  is  rapidly  beecedng  a  matter,  not  of 
spending  dollars  early  to  reduce  the  total  cost,  but  spending  now  so  the  total 
cost  will  be  economically  feasi'ble. 

The  AFSC  policies  are  concerned  with  M  beginning  with  the  receipt  of 
the  SQR.  This  assumes  that  we  are  ready  with  all  the  knowledge  necessary 
to  provide  the  required  M.  ¥e  still  need  to  increase  our  knowledge  of  M 
but  today  with  what  we  Idiow  we  can  achieve  M.  ¥e  have  our  policies, 
regulations,  specifications,  etc.  that  are  necessary  to  proeiote  a  fine  system 
H  program,  yet  there  is  still  some  degree  of  apathy  or  reluctance  on  the  part 
of  managers  to  forge  ahead.  The  management  aspects  are  solid  and  follow  an 
approach  that  has  been  proven  to  be  successful  many  times.  Perhaps  a 
discussion  of  the  comments  received  by  AFSC  that  question'  the  validity  or 
soundness  of  the  M  program  will  reveal  more  than  a  mere  listing  of  current 
policies .  " 

These  evidently  are  the  points  that  need  clarifloation. 

1.  Bow  should  M  requirements  be  expressed? 

Here  we  are  talking  about  quantitative  M  requirements.  There 
is  no  one  numerical  figure  that  has  been  developed  that  can  espress  systems 
H  requirements  for  all  types.  kYR  66-29A  gives  seme  guidance  regarding 
statements  of  requlraaents.  For  the  using  command  the  operational  ready 
rete  is  probably  the  most  important  factor.  M  is  not  the  only  contributor 
to  this  factor  but  it  is  an  laportant  and  integral  part  of  it.  The  avail¬ 
ability  requlrownt  used  frequently  by  BSD  in  L  systems  is  almost  synonomous 
with  operational  ready  rate.  To  take  a  step  closer  to  pure  M  the  apportion¬ 
ment  and  breakdown  of  available  tine  to  perform  defined  maihCenance  tasks  is 
one  of  our  best  measures  of  M.  These  can  be  expressed  in  tenas  of  MTTR, 
remove  and  replace  times,  tvfnaround  time,  servicing  tines,  checkout  times, 
etc.  Subsysteias  should  be  allocated  a  lixiit  of  contribution  to  downtime 
and  MTCE  manhours.  These  do  not  consider  cost  particularly  but  do  allow 
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detexninatlon  of  discrete  time  requiranents  to  meet  mission  objectives. 
Meeting  tine  requirements  does  not  pajrtieularly  assure  ease  nor  economy  of 
maintenance.  The  maintenance  nanhours/task,  skills,  support  equipment, 
etc.  are  also  jn^ortant  requirements  or  limitations  that  must  be 
expressed.  Requirements  must  be  related  to  the  3  levels  of  maintenance 
with  prlnaiy  aphasia  on  organizational,  field  next,  and  then  depot. 
Statements  of  requirements  have  been  recognized  as  a  major  problem  in 
N  and  I  would  like  to  mention  a  few  actions  being  taken  to  resolve  it. 
%ern  was  a  symposium  at  Seattle  hosted  by  Boeing  on  this  subject. 

The  2nd  Annual  AFAndustry  meeting  at  Andrews  26  -  26  March  has  a 
panel  devoted  to  measurement  of  M  and  the  AF  M  Manual  now  being  written 
is  to  give  guidance  at  all  level?  on  how  to  es^ress  M  requirements. 

Obviously  these  requirements  must  be  in  the  SQR,  PSPP,  SPP,  RFP*s  and  be 
stated  in  the  contract.  Many  of  our  comments  come  from  SPO  organizations 
regarding  negotiations.  One  that  worries  me  is  the  remark  that  the 
contractor  hired  a  M  expert  with  a-  PHD  and  that  he,  through  a  seides  of 
questions  that  wotO?  probably  baffle  most  of  us,  confused  the  situation 
to  a  point  where  the  M  requirement  was  deleted  because  the  AF  negotiator 
was  convinced  we  dlchi^t  know  what  we  wanted.  This  is  not  the  teamwork  we 
envision.  It  may  be  true  our  requirements  need  more  definitlzatlon  and 
clarifleatlon  is  in  order,  but  the  failure  to  resolve  these  questions 
during  RPP  and  prenegotiation  contacts  with  the  Air  Force  and  waiting 
until  the'  last  minute  leaves  reasonable  doubt  as  to  good  intentions  of  all 
Involved.  This  sltuatlm,  though  Infrequent,  can  easily  be  corrected  by 
proper  planning  by  both  parties  and  getting  together  to  reach  a  mutual 
understanding.  Maintalnability’has  progressed  beyond  the  ques^tlon  of 
whether  quantification  is  required.  It  is  a  definite  requirement. 

General  statements  such  as  "the  system  should  be  easy  to  maintain" 
are  conpleuely  UI^acceptable  as  well  as  quantified  values  that  are  stated 
as  goals  or  objectives  in  contracts.  They  are  almost  meaningless  except 
as  targets  above  a  specified  minimum  acceptable  requirement  that  must  be 
met. 


2.  Kow  can  we  be  sure  our  requirements  are  realistic? 

This  question  normally  comes  from  the  uninformed  after  a  long 
series  of  other  questions  about  why  M  in  the  first  place.  Worrying 
about  the  possibility  of  unreallstic~requlrements  is  not  as  big  a 
problem  as  determining  what  M  is  required  to  assure  the  mission 
acc->.'3p‘'i3hment.  Conceivably  a  new  system  will  not  be  able  to  perform 
because  it  cannot  be  maintained  without  advances  in  M  beyond  our 
capabilities.  I  would  hope  this  would  be  recognized”early.  It  may  be 
that  the  systaa  would  truly  not  be  feasible.  We  are  getting  close  to 
that  situation  now  with  some  of  the  systems  envisioned.  R  &  H  data, 
along  with  AIM  66-1  and  APM  65-110  data,  can  to  a  great  e:^ent*'tell  us 
what  is  feasible  or  realistic.  If  the  requirement  appears  too  stringent, 
there  are  many  tradeoffs  that  can  be  effected  before  and  certainly  after 
the  SOR  by  both  the  Air  Force  and  the  contractor. 


3.  Where  do  we  get  the  money? 


Additional  requests  for  noney  for  M  is  basically  a  result  of 
lack  of  planning.  This  problem  is  intensifi^  when  we  try  to  back  into 
some  already  going  programs.  M  is  then  a  separate  package  that  can  be 
bought  or  not.  Funds  were  never  planned  for  it  as  thej  should  have  been 
and  it  becomes  another  one  of  those  "abilities"  that  are  considered  by 
some  to  be  nice  to  have  but  we  cannot  afford.  Costing  N  is  somewhat  akin 
to  costing  speed  or  altitude  for  an  aircraft.  'When  we  Have  to  back  into 
a  program  we  must  get  a  cost  figure  but  on  a  new  one  it  is  an  integral 
part  of  the  systems  cost  and  not  a  package  on  the  side  that  can  easily  be 
cut  in  a  cost  reduction  exercise.  If  we  believe  we  have  a  balanced  program 
at  the  beginning  we  should  maintain  such  a  balance  and  when  cuts  occur  balance 
them  also.  On  a  new  system  ws  should  never  ask  the  contractor  to  bid  and 
quote  costs  with  and  without  M.  Hie  many  checkpoints  established  for 
review  of  SORs,  PSPPs,  SPPs  and  contracts  are  catching  those  documents  early 
that  do  not  have  M  requirements.  We  at  Hq  AFSC  are  now  reviewing  all  contracts 
for  definltizatlcm  over  a  certain  amount  for  R  and  M  requirements  and 
disapproving  those  that  '^e  not  satisfactory.”  We  do  not  arbitrate  cm  the 
level  of  the  requirements  but  determine  if  they  cosply  with  current 
directives.  Mast  Divisions  have  set  an  internal  check  with  the  Division 
procurement  review  board  and  the  Division  R  &  M  office  to  assure  their 
approval  at  Hq  AFSC.  Provisions  in  RJBs  and  letter  contracts  are  still 
a  problem.  A  revision'  to  the  AFPI  has  been  submitted  that  will  incltide 
R  &  M  provisions  in  RFBs  as  a  check  list  item.  PMI  1-9  now  Includes  M 
program  and  MIIi-M-265l2B  as  check  list  items  for  technical  proposal  work 
statements.  A  major  effort  is  underway  to  eliminate  letter  contracts  or 
at  least  rMuce  the  time  between  them  and  definitlzatlon.  All  of  these 
actions,  for  a  large  part,  are  to  assure  initial  f\mds  and  eliminate  those 
last  minute  added  on  requests. 

U.  What  about  MIPRs? 

AFSC  policy  on  this  is  that  if  we  rje  the  acquisition  agency  we 
request  the  H  requirements  of  the  product  and  funds  or  obtain  a  signed 
waiver  from  the  other  service  or  agency  stating  no  requirement  exists. 

If  it  is  a  Joint  use  system,  AF  will  include  the  AF  requirement.  If 
another  service  is  the  acquisition  agency  the  AF  will  Include  the  M 
requirement  with  funds.  This  should  ccme  out  in  AFSCR  70-2  shortly. 

5.  Do  we  really  need  M  people  in  the  SPO? 

The  answer  is  definitely  yes.  It  is  one  of  our  basic  M  policies. 
The  M  programs  in  our  systems  programs  must  be  managed.  Contract”work 
statements  alone  cannot  take  the  place  of  an  N  coordinator  in  the  SPO. 
Furthermore,  we  require  the  contractor  to  identify  an  organ! zatim  or 
individual  responsible  for  the  contractor's  M  effort.  We  must  provide 
a  matching  focal  point  and  manager  that  can  Imd  will  manage  the  program. 

This  position  is  required  by  AFSCR  80-9  and  must  be  maintained.  Without 
this  man  actively  managing  a  program  involving  millions  of  your  dollars 
M  can  easily  slip  through  the  crack  in  spite  of  contract  requirements. 
TiOntlnued  reliance  on  the  Division  H  staffs  only  perpetuates  the  problem. 
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Today  we  do  not  have  an  abundant  supply  of  qualified  people  for  these 
positions.  Some  of  the  proposed  training  courses  would  help  but  now  the 
selection  of  the  best  qualified  man  will  have  to  do.  M  is  such  an  interesting 
and  challenging  area  that  anjrone  assigned  in  the  area  7or  any  length  of  time 
usually  becomes  enthused  and  shortly  thereafter  becomes  quite  proficient. 

We  are  working  toward  getting  an  AF  specialty  code  for  M  personnel.  This 
is  a  recognized  requirement  that  should  be  met  as  soon  as  possible. 

6.  Now  a  question  or  request  from  industry:  A  common  base  for  bidding. 

This  is  a  serious  problem  and  no  doubt  is  frustrating  to  contractors, 
especially  those  that  are  highly  motivated  to  have  the  best  M  effort.  The 
demonstration  requirements  appear  to  be  the  questionable  area.  Too  often 
C0R9}etltive  contractors  are  left  on  their  own  to  develop  a  demonstration 
plan  without  guidance  as  to  the  degree  of  assurance  desired  by  the  Air  Force. 
The  costs  are  volatile  in  this  area  and  the  contractor  can  easily  price 
himself  out  by  presenting  an  excellent  program  that  is  beyond  our  needs. 

I  believe  the  "A"  appendix  of  }iIL^-26^12B  that  BSD  uses  is  the  best 
guidance  in  this  area  we  have.  We  are  hoping  to  get  industries'  views  on 
this  at  the  AF/industry  meeting  and  resolve  this  problem  for  all  types  of 
systems . 

7.  What  about  M  data  and  status  reporting? 

The  M  status  reporting  of  our  systems  is  a  requirement  that  will 
soon  be  an  essential  part  of  overall  system  status  reports.  The  new  AFSCR 
80-1  Reliability  requires  a  quai^wly  report  on  AFSC  Form  lUi.  Maintainability 
reporting  in  terms  of  MTTR  and  max  downtime  is  included  with  R  to  aid  in 
reporting  availability  as  is  used  in  some  of  the  L  systems  of’ESD.  This  is 
a  first  attenq)!  at  M  status  reporting  and  is  tailored  more  for  BSD  than  other 
Divisions.  “ 

Bventually  we  hope  to  be  able  to  cover  all  types  of  systems.  This,  in 
conjunction  with  a  proposed  R  &  M  data  collection  and  feedback  system 
ooiqjatlble  with  and  including  ASf?  66-1  and  AIM  65-110,  should  provide 
some  needed  H  standards  and  reflect  the  state  of  the  art  regarding  system 
and  equipment  M. 


These  questions  or  comments  about  H  reveal  the  connon  criticisms  that  appear 
to  prevent  the  >rtiolehearted  acceptSace  needed.  The  vagueness  concerning  how 
to  express  M  requirements  must  be  clarified.  We  hope  to  standardize  the 
parameters  7o  the  eoctent  possible  so  requirements  can  be  vinderstood  by  all. 
If  funding  for  H  is  included  at  the  beginning  it  will  be  supported.  The 
AFSC  must  increase  the  number  of  peqple  assigned  to  M. 
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Quantitative  M  Is  a  relatively  nevr  engineering  discipline.  Time  and 
maintenance  manhours  were  approached  first  because  they  are  essential  to 
mission  accomplishment.  Ve  most  progress  to  those  parameters  that  define 
costs,  spares,  specialized  equipment  and  tools,  skills  and  other  resources 
Including  depot  sipport.  We  expect  to  rely  quite  heavily  on  the  logistics 
command  In  Jointly  developing  these  other  parameters. 

In  closing  I  would  like  to  commend  the  ESD^IADC  team  and  their  contractors 
for  their  contributions  in  advancing  M.  nie  H  studies  conducted,  "A" 
appendix  of  MIL-M-26512B,  and  the  teclmlques  used  for  M  analysis  and 
tradeoffs  In  some  of  the  L  systems  are  all  exairples  of~ some  of  the  most 
advanced  M  technology.  Finally,  more  conferenoee  such  as  this  that  extend 
beyond  Just  H  people  talking  to  themsej.ves  and  include  the  Divisions  and 
SPO  managers^ are  needed  to  Increase  the  knowledge  and  appreciation  of  the 
definite  requirement  for  and  means  of  achieving  systems  H. 
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SUMMARY 

The  ESD  interpretations  of  the  Air  Force  and  Systems  Command  policies 
and  directives  relative  to  the  design  for  maintainability  during  research  and 
development  of  Command  and  Control  systems  are  presented.  The  definition 
and  mission  of  "L"  Systems  is  described,  the  organizational  structure 
indicated  and  the  general  modus  operandl  outlined. 

The  interrelation  of  maintainability  with  reliability  is  discussed  in 
terms  of  availability  for  systems  of  long  mission  times  along  with  the 
necessity  for  trade-off  between  these  various  characteristics. 

Typical  contractual  statements  for  "L"  Systems  are  cited  with 
accompanying  program  plan  development. 

DEFINITION  AND  MISSION  OF  1,"  SYSTEMS 

The  breadth  and  variation  of  the  Air  Force  Systems  Command's  efforts 
require  a  means  of  categorizing  these  efforts  into  subelements  for  manage¬ 
ment  and  control.  The  AFSC  program  structure  was  developed  to  provide  the 
criterion  whereby  each  AFSC  job  is  categorized  in  the  program  structure 
PS  4OQL  through  PS  499L.  The  command  and  control  systems,  often  referred 
to  as  "L"  Systems,  are  compositee  of  equipment,  skills,  and  techniques 
which,  while  not  Instruments  of  combat,  are  capable  of  performing  the 
clearly  defined  function  of  enabling  a  commander  to  exercise  continuous 
control  of  his  forces  and  weapons  in  all  situations  by  providing  him  with 
the  information  needed  to  make  operational  decisions  and  the  means  for 
passing  on  these  decisions. 

A  complete  system  includes  all  subsystems,  related  facilities,  equip¬ 
ment,  materiel,  services,  and  personnel  required  for  operation  of  the 
system  so  that  it  can  be  considered  a  self-sufficient  unit  in  its  Intended 
operational  environment.  The  mission  of  these  systems  may  then  be  stated 
as  that  of  collecting,  transmitting,  processing  and  displaying  information 
for  command  decisions  and  for  control  of  forces,  weapons  and  aerospace 
vehicles.  From  this  simple  mission  statement  for  the  systems  developed  by 
the  Electronic  Systems  Division  (ESD)  we  get  a  vivid  picture  of  the 
importance  of  this  work  to  the  defense  and  survival  of  our  nation  and  our 
allies.  Without  these  systems  there  could  be  no  early  wcumlng,  detection, 
interception  nor  destruction  of  aggressor  weapons  in  time  to  prevent 
destruction  of  our  nation  and  resources. 
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To  develop  these  systeins,  various  USAF  organizations  have  been 
amalgamated  into  a  well  coordinated  team  to  provide  a  concurrent  and 
harmonious  approach  to  the  task  of  providing  electronic  systems  for 
command  and  control  of  aerospace  forces.  This  team  is  comprised  of 
representatives  from  research  and  development,  logistics,  training  and 
the  various  using  commands  with  specific  system  acquisition  responsi¬ 
bilities  being  assigned  to  a  specific  System  Program  Office  (SPO) 
identified  by  a  program  structure  designator  between  400L  and  499L. 

Technical  support  for  the  program  is  provided  by  the  Rome  Air  Develop¬ 
ment  Center  (RADC)  at  Griff iss  AFB,  Rome,  New  fork  and  non-profit 
organizations  such  as  MITRE.  The  officer  in  charge  of  the  SPO  has  the 
official  title  of  the  System  Program  Director  and  as  such  is  charged  with 
the  reaponsibillty  to  develop  and  to  deliver  the  first  complete  system  to 
the  using  command  on  schedule,  at  the  lowest  cost  possible  and  with  the 
highest  practicable  capability,  reliability  and  maintainability. 

MAINTAINABILITY  REQUIREMENT 

The  Department  of  Defense,  Headquarters  USAF,  and  the  Air  Force 
Systems  Command  have  recognized  the  importance  of  maintainability  in  the 
system  concept.  They  have  issued  directives  and  regulations  to  stress  its 
considerations  during  early  planning  and  feasibility  study  stages,  as  well 
as  the  need  for  comprehensive  reliability  and  maintainability  programs  for 
operational  development  projects.  These  requirements  are  clearly 
enunciated  in  AFR  66-29A  Maintainability  Program  for  Systezas,  Subsystems, 
and  Equipments  and  AFSCR  80-9  Research  and  Development  Maintainability. 

These  TOlicles  and  procedures  are  implemented  by  the  ESD  Policy  Letter 
No.  (  ),  and  ESDR  80-(  }  Research  and  Development  Maintainability  which 
are  Included  as  appendices  1  and  2  respectively. 

We  at  ESD  are  dedicated  to  the  maintainability  precepts  called  forth 
in  these  documents  and  strive  to  enforce  them  to  the  maximum  degree 
commensurate  with*  the  program  requirements;  however,  we  feel  that  our 
problems  are  slightly  varied  from  those  of  other  divisions.  The  Command 
and  Control  Systems  are  faced  with  excessively  lengthy  mission  time,  but 
on  the  other  hand  are  blessed  with  the  capability  to  perform  maintenance 
on  these  ground  systems.  With  these  possibilities  in  mind,  the  ESD 
stresses  the  Importance  of  "availability"  which  permits  trade-offs 
between  the  design  parameters,  performance,  reliability  and  maintainability. 
By  achieving  a  short  mean-tlme-to-repair  (MTTR),  a  lower  mean-time- 
between-f allure  (MTBF)  can  be  tolerated  and  yet  achieve  the  high  percentage 
of  availability  demanded  of  the  system.  Tor  this  reason  the  reliability 
and  maintainability  program  is  considered  as  one  whereby  the  optimum 
balance  between  all  characteristics  are  sought  to  obtain  the  minimum 
system  total  cost  and  yet  achieve  the  operational  requirements  with  the 
desired  confidence . 
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ESD  POLICY  ON  MAINTAINABILITY 


Maintainability  is  recognized  aa  a  major  design  factor  and  in  con¬ 
junction  with  performance  and  reliability  provides  a  major  contribution 
to  system  effectiveness.  Therefore,  it  shall  be  a  prime  consideration 
in  the  source  selection,  planning,  design,  development,  production,  equip¬ 
ment  Installation  and  operation  of  all  electronic  systems  within  the 
cognizance  of  the  ESD.  Each  System  Program  Office  responsible  for  the 
development  of  electronic  systems,  subsyutems  or  equipments,  will  provide 
the  necessary  direction  and  control  to  achieve  the  required  maintainability 
of  that  equipment. 

Quantitative  maintainability  req\ilrefflents  shall  be  established  for 
all  electronic  systems  to  be  developed  within  the  cognizance  of  ESD. 

These  requirements  shall  be  incorporated  into  each  Request  for  Proposal 
(RFP),  Proposed  System  Package  Program  (PSPP),  System  Package  Program 
(SPP),  Statement  of  Work  (SOV),  system/equipment  specification  and  other 
contractual  documents  released  to  contractors. 

These  maintainability  reqvilrements  will  be  expressed  in  terms  of 
mean-down-time  (MDT)  with  a  constraint  on  the  maximum  or  extreme  value  an 
individual  down  time  will  be  allowed  to  assvime.  The  constraint  will  be 
expressed  as  a  probability  (usually  90%)  that  no  individual  down  time  will 
exceed  a  specified  Interval  of  time. 

These  quantitative  requirements  shall  extend  through  the  contractors 
to  the  subcontractor  and  vendor  levels.  Each  prime  contractor  will  be 
required  to  Impose  quantitative  maintainability  requirements  on  each  con¬ 
tractor  which  are  compatible  with  the  overall  system  requirements  and  will 
require  subcontractor  demonstration  that  the  Imposed  requirements  have  been 
met  or  exceeded. 

To  assist  in  achieving  the  quantitative  maintainability  requirements, 
each  overall  system  program  will  provide  for  an  adequate  contractor  main¬ 
tainability  effort  as  prescribed  in  APR  66-29A  and  MIL-^-26512B.  What  is 
considered  to  be  adequate  is  determined  by  the  program  schedule,  the  type 
of  equipments  to  be  Incorporated  into  a  system,  and  the  statement  of 
quantitative  maintainability  requirements.  However,  each  system  program 
will  provide  at  least  the  following  key  maintainability  work  elements: 

a.  Predictions,  at  selected  milestones,  of  achieved  system 
maintainability . 

b.  Formal  maintainability  design  reviews. 

c.  Collecting,  processing  and  analyzing  downtime  data  from 
all  scheduled  tests. 

d.  Corrective  action  for  causes  of  unmaintainability. 

.t 
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e.  Demonstration  of  quantitative  maintainability  requirements. 

f.  Review  of  all  ECP's  and  non-ECP's  for  maintainability  effects. 

g.  Submission  of  periodic  reports  on  maintainability  program 
progress . 

Each  system  program  will  contain  major  maintainability  program  mile¬ 
stones  at  which  the  SPO  will  review  the  progress  of  contractors  and  will 
take  the  necessary  action  to  keep  the  maintainability  program  compatible, 
effective,  and  correctly  time  phased  with  other  elements  of  the  overall 
program. 

Funds  will  be  provided  for  maintainability  programs  in  submission  of 
any  initial  program  funding  requests  and  in  the  awarding  of  contracts. 
Funding  adequacy  is  determined  on  the  basis  of  system  complexity,  nature 
of  the  equipment  to  be  Incorporated  into  the  system,  the  level  of 
quantitative  requirements,  and  the  depth  and  scope  of  each  maintainability 
program  element. 

Each  SPO  will  maintain  complete,  factual,  and  timely  information  re¬ 
garding  the  status  of  all  maintainability  program  elements  for  continuous 
review  and  program  control  within  the  SPO  and  for  preparation  of  reports 
as  required  by  higher  Air  Force  management  levels. 

A  staff  office  (OPR)  for  maintainability  will  be  manned  to  provide 
staff  guidance  and  assistance  as  necessary  to  assure  a  vigorous  and 
aggressive  maintainability  program. 

MAINTAINABILITY  ORGANIZATION 

The  organization  established  at  the  ESD  and  assigned  the  responslbllty 
for  the  staff  management  of  all  maintainability  efforts  is  as  indicated 
in  Figure  1 . 
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The  reeponelbllitlee,  fvinctlonB  and  procedures  to  be  follovbd  in 
Iffiplementatlon  and  enforcement  of  the  maintainability  programs  are 
clearly  defined  in  ESDR  80-(  ),  Research  and  Development  Maintainability. 

A  copy  of  this  regulation  is  attached. 

MAINTAINABILm  PROGRAM 

The  requirement  for  an  aggressive  and  effective  maintainability  program 
has  been  established  in  APR  &-29A  and  AFSCR  80-9  and  Implemented  by  the 
ESD  via  ESDR  80-(  )  Research  and  Development  Maintainability  and  ESD 
Policy  Letter  No.  (  ). 

The  basic  vehicle  utlized  to  implement  the  maintainability  program  is 
MIL-M-26512B  and  Appendix  A  thereto  for  demonstration.  This  specifica¬ 
tion  la  by  necessity  general  in  nature  and  was  written  to  be  equally 
applicable  to  electronic,  aeronautical,  ballistic  and  space  systems.  For 
this  reason  ESD  has  found  it  necessary  to  supplement  the  instructions 
contained  in  this  specification  and  its  appendix  with  more  explicit 
guidance  in  the  preparation  of  PSPP's,  SPP's.  SOW's,  Specifications, 
Requests  for  Proposals  (RFP's)  and  contractor  Rellabllity/^dalntalnablllty 
Plans.  In  addition,  ESD  recognizes  that  guidance  must  be  provided  all 
bidders  In  the  form  of  a  briefing  in  order  that  all  may  have  a  clear 
understanding  of  what  Is  expected  in  the  R£M  effort  for  the  system. 

After  a  contractor  has  been  selected,  ESD  provides  more  explicit 
instructions  and  direction  in  order  to  obtain  the  type  of  program  needed 
by  the  Air  Force  to  support  the  design  and  development  of  a  specified 
system.  This  guidance  provides  a  firm  requirement  for  specific  tasks  to 
be  accomplished  by  the  contractor,  time  phasing  of  events,  contractor 
monitoring  procedures,  and  methods  of  communication. 

Bidders'  Briefing.  The  ESD's  Staff  Reliabillty/^intainability 
Coordinators  participate  in  bidders'  briefings  as  required.  The  purpose 
of  this  participation  is  to;  (l)  review,  interpret,  and  answer 
questions  relative  to  the  nvunerlcal  requirements  for  IIM<;  (2)  explain 
overall  ESD  philosophy  in  its  approach  to  maintainability  (availability); 
and  (3)  outline  and  recommend  the  type  and  qiuuitlty  (or  depth)  of 
information  needed  for  evaluation  of  bidders'  RAM  proposals.  Ve  feel 
that  the  proposal  submitted  by  the  prospective  contractor  as  a  result  of 
this  meeting  provides  a  very  important  document  for  it  is  here  the  major 
input  by  the  contractor  for  the  BAM  plan  is  found.  This  document  thus 
provides  the  basis  for  the  deflnitized  and  approved  RAM  plan. 

Program  Plan.  Immediately  after  selection  of  a  contractor,  a 
meeting  is  held  with  the  successful  bidder  to  formalize  and  deflnltize 
the  KIM  Program  Plan.  The  basic  document  submitted  as  part  of  the 
bidder's  proposal  is  amplified  so  as  to  provide  an  accurate  description 
of  the  contractor's  effort  in  compliance  with  the  quantitative  system 
requirements.  The  proposed  RAM  Program  should  be  comprised  of  the 
plan  or  strategy  to  be  employed  in  achieving  the  design  for  reliability 
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and  niaintainablllty ;  prediction  of  the  quantitative  figures  to  be 
achieved  by  the^r  proposed  system;  the  organizational  structure  and  the 
lines  of  communication  between  the  various  activities;  the  design  review 
structure,  its  authority  and  modi:s  operandl;  the  corrective  action  loop; 
a  description  of  the  experience  and  achievements  on  past  programs  which 
Involved  numerical  requirements;  and  where  possible,  a  comparison  of  unit 
operational  or  achiev^  MTBF’s  on  similar  systems  with  predicted  component 
MTBF's  on  the  proposed  system  or  subsystems.  It  is  this  proposed  plan 
that  is  discussed  in  minute  detail  and  amplified  to  meet  ESD's  require¬ 
ments.  The  purposes  of  this  meeting  with  the  contractor  are  to  establish 
a  series  of  tasks  to  be  accomplished  based  on  the  proposed  plan  and 
system  requirements;  the  tasks  deflnltized  by  accurate  task  description; 
calendar  time  duration;  time  phasing  and  manhour  allocation  to  perform 
these  tasks;  establish  monitoring  or  review  points;  discuss  the  contractor's 
procedures  for  monitoring  subcontractor  and  vendor  activities;  establish 
lines  of  communication  between  the  procuring  activity  and  the  contractor  and 
his  subcontractors;  identify  personnel  involved  in  the  effort  and  define 
their  respective  responsibilities;  and  establish  the  type  and  content  of 
reports  to  be  submitted  to  the  Air  Force  and  the  schedule  to  be  followed. 

Task  Reaulrements .  There  are  several  tasks  that  are  considered 
extremely  important  to  the  B&M  Program  to  assure  that  the  specified 
requirements  are  met.  It  is  important  that  quantitative  requirements  be 
clearly  defined,  but  we  feel  that  the  design  review  provides  the  most 
powerful  tool  available  to  us  to  assure  that  prime  consideration  has 
been  accorded  the  reliability  and  maintainability  design  parameters  early 
in  design  and  that  continued  emphasis  is  placed  on  this  function 
throughout  the  acquisition  cycle.  For  this  reason  ESD  is  emphasizing 
this  task  to  a  greater  degree  than  all  others.  Tasks  meriting  specific 
discussion  as  a  minimum  are  as  follows: 

1 .  Design  Reviews.  Design  reviews  are  expected  to  be 
accomplished  with  varying  emphasis  and  frequency  throughout  a  program. 

In  the  initial  conception  stages  of  a  system,  the  reliability  and 
maintainability  groups  should  review  the  proposed  configuration  for  such 
points  as  the  use  of  standard  circuits  of  proven  reliability,  compare 
pump-fed  systems  with  pressure-fed  systems,  liquid  rocket  engines  with 
solid  rocket  engines,  one  computer  manufacturer  with  another,  etc.  With 
such  comparisons,  a  paper  study  ms^  be  accomplished  to  obtain  an  estimate 
of  the  system  reliability  and  maintainability  figures  of  merit.  The 
system  configuration  which  is  decided  upon  is  then  reviewed  in  detail. 

Such  reviews  and  evaluations  by  the  reliability,  maintainability,  and 
quality  control  groups  will  be  scheduled  for  all  significant  designs 
before  they  are  finalized.  Design  Review  Check  Lists  should  be  employed 
to  assure  complete  coverage  of  the  design  factors  and  will  include  a 
detailed  examination  of  the  design  documents,  drawings,  and  specifications. 

The  ESD  expects  to  participate  in  these  design  reviews 
and  is  especially  interested  in  the  overall  strategy  employed  to  attain 
the  reliability,  maintainability  and  performance  requirements;  circuit 
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application;  component  application;  parts  application;  stress  analysis 
(margin  of  safety);  and  physical  or  mechanical  reviews.  Should  the 
responsible  ESO  agency  not  attend  any  such  meeting,  detailed  minutes  of 
the  transactions,  corrective  actions,  and  follov-up  procedures  shall  be 
provided  for  review  as  an  appendix  to  the  periodic  report. 

2.  Statistical  Engineering  Activities.  The  reliability  and 
maintainability  program  shall  incorporate  optimum  utilization  of  statistical 
planning  and  analysis.  This  shall  include  the  application  of  such  methods 
as  design  of  experiments,  analysis  of  variance,  and  other  methods 
particularly  suited  to  the  design  and  development  phases,  and  the  use  of 
statistical  qviality  control  methods  in  the  manufacturing  process.  A 
mathematical  model  must  be  maintained  throughout  the  program  which 
presents  a  continuous  representation  of  the  reliability  of  the  system. 

3.  Establish  and  Maintain  a  Failure  Ret»rting.  Analysis 
and  Feedback  System.  The  contractor  shall  have  a  system  for  collecting, 
analyzing,  ana  recording  all  failures  that  occur  in-plant  as  well  as  those 
that  occur  at  test  or  installation  sites.  This  system  shall  be  described 
and  the  applicable  flow-charts  p'ovided  to  indicate  the  routing  of  such 
failure  reports  for  analysis,  corrective  action,  and  follow-up.  The  forms 
utilized  for  this  reporting  system  shall  include  all  the  necessary  data 

to  enable  analysis  and  shall  be  compatible  with  the  procuring  activity's 
failxu-e  reporting  system. 

4«  Recommend  Milestones  or  Monitoring  Points.  Program 
monitoring  commences  with  the  award  of  the  contract  and  continues  through 
the  phases  of  design,  production,  installation,  and  operation.  It  is 
essential  that  specific  points  be  identified  that  are  suitable  for  formal 
review  of  the  program  efforts.  The  Air  Force  requires  at  least  eight 
such  review  points  as  specified  in  AFR  80-5  and  USAF  Bulletin  506,  but 
additional  points  may  be  designated  based  upon  the  system  requirements. 

5.  Management  of  Subcontractor  and  Vendor  Efforts  in 
RellabilltY.  MalntainabilltY .  and  Quality  Control.  It  is  essential  to 
good  program  management  that  a  detailed  plan  be  formulated  that  imposes 
specific  requirements  and  procedures  on  the  subcontractor  and  supplier. 

These  requirements  should  be  in  svifficient  detail  to  assure  that  such  sub¬ 
systems  or  equipments  meet  the  apportioned  reliability  and  maintainability 
requirements  and  the  quality  control  standards. 

6.  Human  Engineering.  The  product  assiu'ance  program  shall 
apply  the  principles  of  human  engineering  in  all  operations  d\iring 
manuf actiure ,  test,  maintenance,  and  operation  of  the  system  or  subsystem 
where  personnel  are  involved.  The  design  should  incorporate  those 
engineering  features  that  minimize  the  possibllty  of  degrading  relia¬ 
bility  and  maintainability  through  human  error.  Human  engineering 
personn.el  shall  participate  in  the  approval  of  all  designs  and  proposed 
tests  to  assure  that  the  principles  in  MIL-STD-803  have  been  incorporated 
in  the  design  and  are  reflected  in  the  test  plans. 
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7.  EffectB  of  Storage.  Packaging..  Traneportation.  Handling 
and .Maintenance .  The  effects  of  the  above  on  the  reliability  of  the 
product  shall  be  considered  in  the  design  of  the  equipsient  and  any 
special  storage,  packaging,  transportation,  handling  and  maintenance 
requirements  shall  be  made  known  to  the  Air  Force. 

8.  EstabliBh  (controls  to  assure  that  all  handbooks  reflect 
the  true  system  configuration  and  that  the  operation  and  maintenance 
instructions  reflect  all  equipment  changes  and  procedxiral  improvements. 

9.  Prepare  a  manloadlng  chart  to  depict  the  projected 
manpower  expenditures.  Such  Information  as  manpower  allocations  per  task 
and  the  time  phasing  of  task  accomplishment  will  be  added. 

10i  Teat  and  Demonstration.  Test  activities  not  only  involve 
Incoming  Inspection  of  parts  and  materials  and  qualification  of  non¬ 
standard  parts,  but  also  environmental  and  operational  testing  of  elements, 
subsystems,  and  complete  systems.  Detailed  test  and^demonstratlon  plans 
shall  be  prepared  to  demonstrate  the  operational  and  performance  require¬ 
ments  of  the  contract  with  the  speelfied  degree  of  reliability  and 
maintainability.  In  addition,  a  planned  and  scheduled  program  of 
functional  testing  of  equipment  shall  be  conducted  during  design  and 
development  phases  to  estimate  the  reliability  and  maintainability 
achieved  and  to  provide  data  feedback  to  be  used  as  a  basis  for  Improvements 
in  design. 


11.  Quality  Control  System.  Written  descriptions  of  the 
quality  control  procedures  to  be  utilized  in  management  of  the  contractor, 
subcontractor  and  supplier  activities  will  be  prepared. 

12.  Compile  and  submit  failure  data  summaries  periodically. 

13.  Prepare  spare  parts  lists  based  upon  mathematical  model 
and  applicable  parts  failure  rates. 

14<  Maintain  a  weak  links  chart  that  depicts  such  information 
as  the  component  falling  most  frequently,  the  corrective  action  req\ilred, 
the  action  agency  and  the  status  of  the  corrective  action. 

15.  Efitabllsh  Training  Program  for  Key  Personnel.  Such 
programs  should  take  f\ill  cognizance  of  previous  rellabillty/maintaina- 
blllty  and  quality  control  education  negotiated  on  other  programs  and  be 
planned  to  supplement  that  training  with  lectures,  pamphlets,  and  posters. 

16.  Prepare  and  submit  periodic  reports  which  contain  the 
detailed  accomplishments  by  task  during  the  reporting  period.  Specific 
entries  should  be  made  on  the  current  predicted  and  achieved  values  of 
reliability  and  maintainability.  Problem  areas  that  are  known  to  exist  or 
ere  anticipated  should  be  listed  along  with  the  planned  courses  of  action 
to  correct  or  alleviate  such  problesw. 


IIB-8 


I 

^  Failure  data  auinaaries  and  other  data  specified  should 

be  affixed  as  a  part  of  the  report. 

Examples  of  actual  tasks  Incltided  in  active  contracts  are 
indicated  in  Appendix  #3. 

CONCLUSIONS 

The  success  of  the  Reliability  and  Maintainability  Program  is  a 
direct  function  of  the  excellence  of  the  program  plan,  the  effectlvlty 
of  the  organization  and  personnel  involved,  and  the  clear  understanding 
by  .all  participants  of  the  requirements,  procedxures,  and  philosophy 
underlying  the  development  plan.  It  is  believed  that  this  paper  has 
provided  you  with  the  ESD  policies  and  procedures  in  implementation  of 
those  established  by  Hqs  USAF  and  AFSC. 

The  program  plan  provides  an  orderly  approach  to  the  design,  develop¬ 
ment  and  production  of  reliable  and  maintainable  equipment  and  deserves 
special  attention  by  all  personnel  concerned  with  its  execution.  The 
preparation  and  deflnltization  of  the  plans  affords  several  useful 
purposes:  (l)  it  is  a  valiiable  exercise  for  the  personnel  to  participate 
in  the  reliability  and  maintainability  groups'  approach  to  the  problem; 

(2)  the  coordination,  deflnltization  and  description  of  the  tasks  or 
work  items,  assures  understanding  and  agreement  between  not  on  the 
contractor  personnel,  but  the  procuring  activity  as  well;  (3)  it  delineates 
the  area  of  responses  and  describes  the  activities  of  the  associated 
groups;  and  (4)  it  serves  as  an  important  contractual  document  that  reflects 
an  official  working  document  agreed  upon  by  all  agencies  involved. 

The  finished  Reliability  and  Maintainability  Program  Plan  discussed 
and  developed  by  this  method  precludes  any  future  misunderstandings  as 
regards  Intent  and  scope  of  each  task  and  facilitates  the  monitoring  of 
the  program  by  the  procwing  activity. 
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ESD  Policy  Letter  No.  (  ) 

Maintainability  In  Electronic  Sveteina 

1 .  Statement  of  Policy 

Maintainability  will  be  a  prime  consideration  in  the  source  selection, 
planning,  design,  development,  production,  equipment  Installation,  and 
operation  of  all  electronic  systems  within  the  cognizance  of  the  Electronic 
Systems  Division  (ESD).  Maintainability  is  recognized  as  one  of  the  major 
characteristics,  in  conjunction  with  system  reliability,  performance,  and 
cost  which  contributes  to  overall  electronic  system  effectiveness.  There¬ 
fore,  each  office  responsible  for  managing  specific  systems  will  provide 
direction  and  control  to  achieve  required  Maintainability  of  systems 
within  their  cognizance. 

2.  Need  for  Quantitative  Maintainability  Requirements 

Quantitative  Maintainability  requirements  will  be  established  for  all 
electronic  systems.  These  requirements  will  be  Incorporated  into  each 
PSPP,  SPP,  system  specification,  SOW  and  other  contractual  documents 
released  to  contractors.  Provisions  will  bo  made  for  the  demonstration  of 
the  stated  quantitative  reqTjdrements  at  a  selected  milestone  within  each 
overall  system  program. 

3.  Statistical  Nature  of  Quantitative  Maintainability  Keouirements 

System  quantitative  Maintainability  requirements  will  be  expressed  in 
terms  of  mean-down-time  (MDT)  with  a  constraint  on  the  maximum  or  extreme 
value  an  individual  downtime  will  be  allowed  to  assume.  This  constraint 
will  be  expressed  as  a  probability  (usually  90^)  that  no  individual  DT 
will  exceed  a  specific  amount  of  time. 

Prime  contractors  will  bo  required  to  impose  quantitative  Maintain¬ 
ability  requirements,  which  are  compatible  with  the  overall  system 
requirements,  on  individual  subcontractors  and  to  provide  for  subcontractor 
demonstrations  that  imposed  requirements  have  been  met  or  exceeded. 

4*  Maintainability  Program  and  Its  Elements 

To  assist  in  achieving  the  quantitative  Maintainability  requirements, 
each  overall  system  program  will  provided  for  an  adequate  contractor 
Maintainability  effort  in  accordance  with  APR  66-29  MIL-M-26312.  The 

degree  of  adequacy  is  dependent  on  the  program  schedule,  the  type  of 
equipments  to  be  incorporated  into  a  system,  and  the  statement  of 
qtiantitatlve  Maintainability  requirements.  However,  each  system  program 
will  provide  at  least  the  following  key  Maintainability  work  elements i 
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a.  Predictions,  at  selected  milestones,  of  achieved  syntem 
tfeintalnabillty . 

b.  Formal  maintainability  design  reviews. 

c.  Collection,  processing  and  analysis  of  downtime  data  from 
all  scheduled  tests. 

d.  Corrective  action  for  causes  of  unmaintainability. 

e.  Demonstration  of  quantitative  maintainability  requirements. 

f.  Review  of  all  ECP'a  and  non-ECP's  for  maintainability  effects. 

g.  Submission  of  periodic  reports  on  maintainability  program 

progress. 

Each  system  program  will  contain  major  maintainability  program  mile¬ 
stones  at  which  a  SPO  will  review  the  progress  of  contractors  and  will 
take  necessary  corrective  action  to  keep  the  maintainability  program 
compatible,  effective,  and  correctly  time-phased,  with  other  elements 
of  the  overall  program. 

5.  Funds  for  Maintainability  Programs 

Adequate  funds  will  be  provided  for  maintainability  prograjns  in  sub¬ 
mission  of  any  initial  program  funding  requests  and  in  the  awarding  of 
contracts.  Funding  adequacy  is  determined  on  the  basis  of  system 
complexity,  nature  of  the  equipments  to  be  Incorporated  into  the  system, 
the  level  of  quantitative  requirements,  and  the  depth  and  scope  of  each 
maintainability  program  element. 

6.  Reports  to  Higher  Air  Force  Levels  and  Status  Documents 

It  is  a  management  responsibility  to  provide  direction  and  control  to 
each  element  of  a  maintainability  program.  Each  SPO  will  maintain  complete, 
factual,  and  timely  information  regarding  the  status  of  all  maintaina¬ 
bility  program  elements  for  continuous  review  and  program  control  within 
a  SPO  and  for  reports,  as  required,  to  higher  Air  Force  management  levels. 

'  7.  Staff  Assistance 

Staff  assistance  in  the  area  of  maintainability  will  be  provided  to 
each  SPO  by  the  Office  of  Primary  Responsibility  in  accordance  with 
ESD  Regulation  S0-(  ). 
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ESD  REGUUTION  (Proposed) 
No.  80-  (  ) 


ESDR  80-(  } 
HQ  ELECTRONIC  SYSTEMS  DIVISION 
AIR  FORCE  SYSTEMS  COMMAND 
Laurence  G.  Hanscom  Field,  Bedford,  Mass. 


Research  and  Development 
MAINTAINABILITY 

THIS  REGUUTION  ASSIGNS  RESPONSIBILITIES  FOR  THE  IMPLEMfMTATION ,  MANAGE¬ 
MENT,  AND  CONTROL  OF  MAINTAINABILITY  PROGRAMS  WITHIN  THE  ELECTRONIC 
SYSTEMS  DIVISION  (ESD).  THIS  REGUUTION  IMPLEMENTS  THE  PROVISIONS  OF 
AFSCR  80-9,  FURTHER  AMPLIFIES  ESD  POLICY  LETTER  NO.  (  )  WHICH  REUTES 
TO  MAINTAINABILITY,  AND  IS  IN  ACCORDANCE  WITH  THE  REQUIREMENTS  OF 
AFR  66-29  AND  MIL-M-26512. 

1.  Appointment  of  a  SPO  Maintainability  Monitor  and  General  Functions: 

a.  Each  SPO  Director  will  appoint  a  qualified  individual  (or 
Individuals)  iidio  will  have  prime  responsibility  within  a  SPO  for 
establishing  SPO-contractor  maintainability  programs,  monitoring  the 
progress  of  each  contractor  on  his  approved  maintainability  program,  and 
making  recommendations  to  appropriate  SPO  personnel  for  necessary 
redirection  of  any  maintainability  program.  This  individual  (or 
individuals)  will  distribute  within  the  SPO  all  approved  policies, 
regulations,  bulletins,  and  specifications  pertaining  to  maintaina¬ 
bility  and  will  advise  the  SPO  Director  of  any  significant  changes  to 
these  policies,  regulations,  bulletins,  and  specifications  affecting 
SPO  plans,  operations,  and/or  the  acqusition  of  equipments. 

b.  The  individual  (or  individuals)  assigned  the  responsibility  of 
maintainability  monitor  will  be  identified  to  the  Office  of  Primary 
Responsibility  by  name,  office  symbol,  stop  number,  telephone  number, 
and  room/bulldlng  number.  His  training  and  experience  in  maintainability 
will  also  be  submitted. 

2.  Office  of  P^^ln>■rv  Reanonslbility.  Deputy  for  Technical  Services, 
ESSTE-2,  will  serve  as  Office  of  Primary  Responsibility.  This  office  will: 

a.  Assist  each  SPO  in  the  establishment  of  qiiantltatlve  maintaina¬ 
bility  reqTilrements  and  methods  of  demonstration. 

b.  Assist  each  SPO  in  establishing  design  for  maintainability 
philosophy  and  procedures. 

c.  Assist  each  SPO  in  the  establishment  of  elements  of  maintaina¬ 
bility  programs. 
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d.  Assist  each  SFO  in  the  negotiation  with  contractors  of 
maintainability  program  elements. 

e.  Assist  each  SPO  in  periodic  reviews  of  contractor  progress  on 
maintainability  programs  and  furnish  recommendations  to  each  SPO  with 
regard  to  improving  either  contractor  performance  or  necessary  re¬ 
direction  of  the  scope  and  intent  of  each  reviewed  maintainability 
progrcun. 


f .  Participate,  as  required,  in  any  briefings  on  maintainability 
presented  at  bidders'  conferences. 

g.  Participate,  as  required,  in  source  selection  boards  to  assure 
proper  emphasis  on  maintainability. 

h.  Compile,  maintain,  and  distribute  to  each  SPO  approved  manage¬ 
ment  procedures,  methods,  and  instructions  for  maintainability  programs. 

i.  Provide  each  SPO  with  copies  of  all  approved  policies,  regula¬ 
tions,  bulletins,  and  specifications  on  maintainability  and  assist  in 
interpreting  these  documents  for  application  on  particular  SPO  contracts. 

J .  Provide  the  ESD  member  on  the  AFSC  Maintainability  Task  Force 
and  other  representative  groups.  Represent  the  ESD  in  effecting 
necessary  coordination  in  maintainability  matters  with  other  Divisions 
and  Centers  of  AFSC,  USAF,  DOD,  other  services,  and  industry,  except 
as  this  responsibility  may  be  delegated  for  specific  aspects  of  a 
problem. 


k.  Arrange,  as  necessary,  limited  attendance  conferences  on 
maintainability  which  Involve  Industry  and  SFO  participation.  The 
purpose  of  these  conferences  is  to  explain  fully  the  current  approved 
policies,  regulations,  bulletins,  and  specifications  on  maintainability. 

l.  Cooperate  with  the  Deputy  for  Technology  eund  the  Deputy  for 
Advanced  Planning  in  developing  long-range  plans  for  studies  and  research 
in  maintainability  techniques. 

m.  Chair  and  distribute  agenda  and  minutes  of  monthly  meetings  with 
SPO  maintainability  monitors. 

n.  Cooperate  with  the  Training  Office  in  developing  and  in 
conducting  maintainability  education  programs. 

0.  Review  all  PSPP,  SPP,  Specifications,  and  Uork  Statements  for 
compliance  to  approved  policies,  regulations,  bulletins,  and 
specifications  on  maintainability.  ** 


» 
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р.  Provide  the  active  staff  element  necessary  to  assure  implementa¬ 
tion  of  adequate  and  uniform  policies  and  procedures  on  all  maintainability 
matters  within  the  ESD.  This  will  Involve  review  and  interpretation  of 
all  maintainability  policies,  procedures,  bulletins,  and  specifications 
and  regulations  Issued  by  higher  headquarters. 

3.  Specific  Functions  of  a  SPO  Maintainability  Monitor; 

a.  Act  as  a  general  focal  point  within  the  SPO  for  all  matters 
pertaining  to  maintainability. 

b.  Assist  the  Office  of  Primary  Responsibility,  as  required  in  the 
development  of  maintainability  policies,  regulations,  bulletins,  and 
specifications . 

с.  Assist  other  SPO  personnel  in  establishing  design  for  maintaina¬ 
bility  philosophy  and  procedures. 

d.  Provide  contractors  with  detailed  Instructions  regarding 
maintainability  program  requirements. 

e.  Review  contractor  maintainability  program  plans  and  initiate  any 
corrective  actions  designed  to  bring  plans  within  the  scope  and  intent  of 
approved  policies,  regulations,  bulletins,  and  specifications  on 
maintainability . 

f.  Take  necessary  action  to  insure  that  proper  quantitative 
maintainability  requirements  are  Incorporated  into  PSPP's,  SPP's,  SOV's 
System  Specifications,  and  all  contractual  documents  furnished 
contractors  by  the  SPO. 

g.  Establish  appropriate  maintainability  program  monitoring  points 
with  contractors . 

h.  Conduct  maintainability  program  reviews  at  the  established 
monitoring  points.  At  these  meetings,  the  SPO  maintainability  monitor 
will: 


(1 )  Review  and  determine  the  adequacy  of  the  overall  progress 
of  the  maintainability  program.  Assistance  from  the  OPR  and/or  RADC 
(see  paragraph  4)  will  be  requested  sufficiently  in  advance  of  these 
meetings  in  order  that  these  organizations  will  be  able  to  provide  the 
requested  support. 

(2)  Discuss  the  adequacy  of  all  maintainability  program 
reports  submitted  to  the  SPO. 

(3)  Review  any  maintainability  problems  affecting  compliance 
to  the  quantitative  maintainability  requlrestents  and  Insure  by  follow¬ 
up  that  timely  corrective  action  is  planned  or  being  taken. 
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(4)  Review  the  adequacy  of  contractor's  design  for  maintaina¬ 
bility  techniques. 

(5)  Determine  the  overall  progress  toward  the  achievement  of 
the  quantitative  maintainability  requirements. 

(6)  Determine  that  the  contractor's  corrective  action  system 
is  correctly  functioning  and  that  maintainability  engineers  and  others 
involved  in  the  corrective  action  process  are  aware  of  their  respective 
responsibilities . 

i.  Following  each  maintainability  program  review,  a  SPO  maintaina¬ 
bility  monitor  will; 

( 1 )  Document  his  findings  and  recommendations . 

(2)  Review  his  findings  and  recommendations  with  appropriate 
SPO  personnel  in  order  that  any  corrective  recommendations  can  be 
implemented . 

(3)  Furnish  to  the  OPR  a  copy  of  findings,  recommendations, 
and  SPO  actions  to  be  taken  or  taken  on  the  reviewed  maintainability 
program. 

j.  Periodically,  review  each  maintainability  program  with  the  SPO 
Director . 

1.  Attend  and  participate  in  the  scheduled  monthly  meetings  of  SPO 
maintainability  monitors. 

4.  Maintainability  Support  Functions  of  RADC; 

a.  Provide  technical  support  to  the  SPOs,  upon  reqjiest,  in  the 
following  areas: 

( 1 )  Establishment  of  quantitative  maintainability  requirements . 

(2)  Establishment  of  design  for  maintainability  philosophy  and 
procedures . 

(3)  Review  of  maintainability  mathematical  models,  maintain¬ 
ability  demonstration  plans,  and  other  technical  reports. 

(4)  Review  of  contractor  progress  on  a  maintainability  program. 

b.  Specific  individuals  will  be  designated  by  RADC  to  the  SPOs  and 
the  OPR  as  to  the  individuals  assigned  to  provide  the  support  defined  in 
paragraph  4e> 
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c.  Provide  a  central  office  for  the  collection,  evaluation,  and 
dieeemlnation  of  applicable  naintainabllity  statistics  (mean  downtime, 
mean  time  to  repair,  repalrabllity  values,  etc.)* 

d.  Furnish  consiiltant  service  in  the  application  of  the  informa¬ 
tion  required  by  paragraph  4c  to  current  and  future  maintainability 
programs. 

e.  Manage  contracts  for  an/or  conduct  research  in  maintainability 
techniques  on  projects  assigned  to  RAIX:. 

f .  Provide  an  associate  member  on  the  AFSC  Maintainability  Task 
Force  and  other  representative  groups. 

g.  Provide,  upon  request,  a  member  for  source  selection  boards. 

h.  Provide  consultant  service  to  ESD  elements  on  technical  advance¬ 
ments  in  the  areas  of  maintainability  prediction,  analysis,  and 
demonstration. 

i.  Attend  and  participate  in  scheduled  monthly  meetings  of  SFO 
maintainability  monitors.. 

j .  Attend  monthly  coordination  meetings  on  maintainability  matters 
with  the  OPR. 

5.  Maintainability  Support  Functions  of.Peputy  for  Technology  (ESR)> 

a.  Establish  a  maintainability  research  and  advanced  development 
program,  based  on  current  and  future  ESD  system  requirements.  This 
program  should  Include  at  least  components  application  techniques, 
circuit  techniques,  materials  and  processes,  packaging,  repair  vs  throw¬ 
away  maintenance  concepts. 

b.  Assume  responsibility  for  the  planning,  funding,  and  implementa¬ 
tion  of  research  programs  in  the  areas  Indicated  in  paragraph  5a. 


1  Attachment 
Check  List 
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CHECK  LIST 


Tep  Key  Actlone  to  Be  Taken  By 
A  SPO  Maintainability  Mopltor 

1.  Assist  In  establishing  quantitative  maintainability  requirements. 

2.  Assist  In  defining  design  for  maintainability  philosophy  and 
procedures . 

3.  Arrange  f)r  maintainability  program  plan  submission  and  determine 
the  adequacy  of  the  plan. 

4.  Arrange  for  establishment  of  a  mathematical  model  which  relates 
maintainability  and  other  system  characteristics.  The  model  Is  to  be  used 
for  trade-offs  analyses,  corrective  actions  evaluations,  and  prediction 
calculations . 

5.  Require  a  contractor  to  have  a  maintainability  design  review  plan  and 
procedure.  Arrange  to  participate  In  selected  reviews. 

6.  Establish  SPO-contractor  maintainability  program  monitoring  points. 
Conduct  program  reviews  at  these  points.  Determine  the  adequacy  of  the 
means  employed  by  a  prime  contractor  to  control  the  maintainability 
efforts  of  hla  subcontractors. 

7.  Require  that  a  contractor  has  a  well  defined  corrective  action 
procedvire  for  eliminating  (or  reducing  In  effect)  the  causes  of 
unmalntalnablllty . 

8.  Arrange  for  submittal  and  review  of  maintainability  program  reports. 

9.  Assist  In  establishing  maintainability  demonstration  philosophy 
and  procedures  and  arrange  for  review  of  test  plans  and  test  results. 

10.  Arrange  that  maintainability  program  reports  and  findings  are 
submitted  to  other  SPO  activities  (reliability,  system  engineering, 
logistics,  etc.)  for  their  use  In  performing  their  functions. 
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APPENDIX  3 


Sample  Tasks  from  ESD  Contracts 
on  R&M  Programs 


1.  Equipment  R/^  Design  Reviews  (Task  I,  NDDETS  Program) 

DESICat  ASSISTANCE 

Preferred  Parts  List 

A  preferred  parts  list  (PPL)  will  be  developed  for  the  i^TL  System 
in  accordance  with  MIL-E-4138B  and  will  be  supplied  to  the  equipment 
design  activity  for  parts  selection  criteria.  In  the  case  of  sub¬ 
contractor  supplied  equipment,  subcontractors  will  be  required  to 
comply  with  this  list  except  that  existing  subcontractor  parts  lists  may 
be  used  subsequent  to  approval.  In  these  cases,  back-up  data  relative 
to  parts  application  and  acceptibllity  will  be  required. 

Parts  Approval 

Parts  approval  will  be  based  upon  the  PPL.  Components  or  parts 
recommended  or  required  in  equipment  design,  but  not  identified  in  the 
PPL,  will  be  subject  to  Air  Force  approval  in  accordance  with  the 
requirements  of  MIL-E-4158B.  For  the  prototype  equipment, 
deviations  or  relaxation  of  MIL-E-4158B  application  may  be  granted, 
concurrent  with  customer  approval. 

Part  Application  Aids  and  Recommendations 

A  Project  Data  Book  (PDB)  for  the  477L  Prototype  has  been  prepared 
for  the  equipment  designer's  assistance.  This  PDB  will  be  periodically 
updated  throughout  the  life  of  the  program  to  include  the  following t 

a.  PPL 

b.  Part  standards  (voltages,  signal  levels,  impedances,  etc.) 

c .  Input/output  specifications 

d.  Responsible  project  design  engineers 

e.  Reliability  application  and  de-rating  information 

f .  Design  review  procedures. 

Design  Review 

Design  reviews  will  be  conducted  by  reliability /maintainability 
engineers  for  each  equipment  to  ensure  compliance  with  reliability/ 
maintainability  objectives.  Reviews  will  include  review  and  slgnoff 
of  equipment  schematics  and  drawings  prior  to  release  to  production. 
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These  reviews  will  be  conducted  in  accordance  with  the  attached 
design  review  checklist,  and  in  accordance  with  the  Project  Data  Book. 
Records  of  design  review  will  be  made  available  to  the  USA7  upon 
request.  Exhibit  B,  Parts  I,  II  and  III,  and  Exhibit  C  of  the 
availability  program  plan  are  also  attached.  In  the  case  of  sub¬ 
contractor  supplied  equipment,  design  review  will  be  performed  by  the 
subcontractor  in  accordance  with  provisions  of  paragraph  3.5.  In 
cases  of  commercial  equipment  with  experienced  field  usage,  experienced 
data  will  be  submitted  as  part  of  a  design  review. 

Corrective  Action  Re command atlons 

Rellablllty/malntalnablllty  recommendations  resulting  from  design 
reviews  will  be  documented,  and  a  report  of  action  by  the  cognizant 
design  engineer  will  be  required . 

Evaluation  of  Proposed  Changes 

Proposed  changes  In  the  design  of  equipment  will  be  reviewed  by 
reliability/maintainability  engineers  in  compliance  with  paragraphs 
4.1,  4.2,  4.3  and  4.4.  Rellablllty/malntalnablllty  apportionments  and 
predictions  will  be  up-dated  as  necessary. 


2.  Subcontractor  Control  (Task  V,  EMT) 

Description  of  the  Task 

Quality  Assurance  will  perform  surveillance  of  subcontractors  of 
equipment  in  two  areas  of  eifort.  (l)  quality  control  and  (2)  relia¬ 
bility  and  maintainability.  The  quality  control  system  of  each  sub¬ 
contractor  shall  be  monitored  1:^  Quality  Assurance  to  determine 
compliance  to  established  criteria  for  the  following; 

a.  Quality  control  procedures 

b.  Drawing  and  change  control 

c.  Supplier  svirvelllance  by  the  vendor 

d.  Receiving  Inspection  and  test 

e.  Inspection  and  test  during  manufacturing 

f.  Process  control 

g.  Calibration  of  measuring  Instruments 

h.  Final  inspection  and  test 

1.  Proper  sampling  Inspection 

j .  Methods  to  Indicate  Inspection  status 

k.  Control  of  discrepant  materials 

l.  Storage  of  materials 

m.  Quality  control  records 

n.  Packing  and  shipping  control 

o.  Corrective  Action  system. 
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Using  MIL-Q-9858  as  a  guide,  Quality  Assurance  will  require  corrective 
action  for  all  elements  of  the  above  for  which  each  subcontractor  does 
not  comply.  Quality  Assuremce  representatives  shall  perform  surveil¬ 
lance  of  the  quality  control  systems  of  the  subcontractors  by  means  of 
survey  checklists,  day  to  day  observations,  witnessing  of  processes  and 
inspections,  performing  inspections,  as  necessary,  and  witnessing  final 
inspections  and  acceptance  tests. 

Quality  Assurance  will  monitor  the  following  areas  of  the  reliability 
and  maintainability  program  of  each  equipment  subcontractor: 

a.  General  reliability  program  of  the  subcontractor 

b.  Compliance  to  detailed  equipment  design  specifications 

c.  Compliance  to  service  conditions 

d.  Dependability  of  materials  and  parts 

e.  Compliance  to  performance  requirements 

f.  Equipment  maintainability  characteristics 

g.  Human  Factors 

h.  Personnel  Job  tasks  and  reliability  indoctrination 

i.  Reliability  analysis  (MTBF)  with  subcontractors  reports  in 
accordance  with  the  requirements  of  each  subcontract. 

After  the  award  of  each  purchase  order  or  subcontract  for  equipment, 
a  Quality  Assurance  Engineer  will  begin  coordination  of  the  sub¬ 
contractor's  reliability,  maintainability  and  quality  control  program. 
Problem  areas  will  be  promptly  reported  in  order  that  Quality  Assurance 
can  obtain  corrections.  Checklists  and  other  control  media  will  be 
developed  under  Task  14« 

Duration  of  Task 

The  program  will  start  immediately  when  purchase  orders  are  awarded 
to  subcontractors.  SiarveiT lance  of  an  equipment  manufacturer  shall  be 
discontinued  after  he  has  satisfied  all  obligations  of  his  contract. 


3.  System  Reliability /^Intalnabllity  Mathematical  Model  (Task  A, 

Big  Rally  11 ) 

Identification  of  the  Task 

Establish  and  modify,  as  necessary,  a  system  reliability /maintain¬ 
ability  mathematical  model. 

Description  of  the  Task 

_____  will  develop  a  mathematical  model  for  system  reliability/ 
maintainability  from  field  data  and  available  equipment  evaluations. 
Circuit  availability  calculated  from  the  model  shall  use  the  equipment 
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configuration  where  transmleslon  is  over  the  most  hazardous  path,  since 
there  are  many  poaal|^e  sources  and  destinations  for  a  particular 
transmission,  then®jf  other  path  would  have  a  higher  circuit  availability. 
At  least  one  model  for  each  of  the  three  phases  on  the  installation  of 
the  system  could  be  developed  for  comparison  during  Interim  operation 
and  maintenance,  but  only  an  assumed  configuration  for  the  final  system 
shall  be  used  for  developing  the  model.  Establishment  of  the  model  will 
utilize  available  information  on  equipment  MTBF,  MTIR,  propagation  path 
failure,  failure  rates  etc.,  where  such  information  is  available  on 
equipment  and  systems  of  essentially  the  same  complexity.  In  addition, 
the  configuration  of  the  power  generating  equlpinent  is  not  known,  so 
a  likely  configuration  will  be  assumed.  The  model  will  measure  the 
effect  of  these  criteria  on  channel  availability.  The  model  will  be 
developed  using  established  statistical  analysis  techniques  by  the 
Equipment  and  Systems  Evaluation  Department  with  system  information 
coordinated  by  the  Systems  Planning  Department  and  the  Quality  Assurance 
Department. 

Dbratlon  of  the  Task 

The  development  of  the  model  will  begin  in  April  and  extend 
through  the  middle  of  May. 

Man  Loading  (Man  Months) 


Manager,  Quality  Assurance 

Dec.  Jan.  Feb.  Mar.  Apr. 

.02  .02 

May 

.01 

Senior  Engineer 

.35 

.15 

Senior  Statistician 

1 

.5 

Engineering  Aide 

.5 

.5 

Stenographer 

.2 

.2 
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VALUE  ANALYSIS 


Robert  L.  Bidwell 
Martin  Company 


Around  the  turn  of  the  century,  many  companies  had  become  so  large  that 
top  management  was  no  longer  in  direc'.  contact  with  everything  going  on  in 
their  company.  Furthermore,  these  companies  were  so  complex  that  management 
had  to  direct  their  energies  toward  planning,  policy,  and  general  adminis¬ 
tration  rather  than  individual  efforts  or  methods.  Hence,  the  efficiency 
expert,  the  time  and  motion  study  man,  came  into  being.  This  man  was  a  tool 
of  management  used  to  put  more  value  into  certain  operations  of  the  company. 
"Time  is  money"  Ben  Franklin  said,  and  the  efficiency  expert  improved  the 
company's  position  by  givin,-  more  value  to  time. 

It  was  almost  a  half  century  later  than  another  expert  in  search  of 
increased  value  entered  the  picture.  He  was  and  still  is  looking  for  ways 
to  improve  design,  to  perform  the  same  function  at  lower  cost  or,  if 
possible,  to  eliminate  the  function  altogether.  He  is  the  Value  Engineer, 
sometimes  known  as  a  Value  Analyst, 

The  Air  Force  definition  of  the  function  of  Value  Engineering  AFR 
7O-I6  reads  as  follows: 

"Value  Engineering  is  a  proven  cost  prevention  and  cost  reduction 
technique.  Properly  applied,  the  technique  (l)  identifies  the 
function  of  a  product  or  service,  (2)  establishes  a  dollar  value 
for  that  function  and  (3)  endeavors  to  provide  that  function  at 
the  lowest  cost  without  degradation  of  performance  or  quality." 

At  Martin-Orlsuido ,  we  call  the  overall  progreun  Value  Analysis. 

Personnel  supporting  this  effort  are  charged  with  securing  greater  value 
and  reliability.  Simplicity  is  their  by-word.  They  work  to  eliminate 
unnecessary  functions.  Complexity  in  design  normally  adds  more  detail 
parts  which  acre  susceptible  to  failure  and  need  to  be  maintedned  in  the 
field.  All  of  this  adds  cost  and  decreases  value.  Our  Value  Engineer's 
effort  to  eliminate  unnecessary  functions  is  axi  extremely  important  pairt 
of  Value  Analysis  but  it  is  only  a  part  of  the  complete  cost  reduction 
effort.  We  have  organized  our  attack  on  costs  and  oriented  to  the  total 
cost  of  doing  business  -  not  just  engineering,  not  just  time  and  motion 
studies  but  encompassing  the  entire  business  operational  spectrum.  At 
Mart in-Orlando  we  say  that  Value  Analysis  is  everybody's  business,  from  the 
general  manager  to  the  mail  boy. 

Such  a  program  starts  with  the  aggressive  support  and  intense  interest 
from  the  general  manager  and  flows  throughout  the  plant  to  all  levels  of 
operation.  The  organization  of  the  program  ensures  that  a  cost  reduction  in 
one  area  does  not  mean  more  work  or  cost  for  someone  else  in  another  area. 

It  allows  the  man  in  finance  to  work  with  a  man  in  purchasing  to  make  a 
savings  on  an  item  ordered  in  the  engineering  department.  We  are  continually 
reducing  the  tendency  to  add  safety  factors  upon  safety  factors  which  result 
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in  overdesign  in  the  names  of  safety  or  reliability  when  these  things  could  be 
accomplished  adequately  at  much  lower  cost.  Value  Analysis  strives  for 
reliability,  but  at  the  same  time  it  ensures  that  a  part  with  a  maximum  life 
cycle  requirement  of  ten  years  is  not  designed  to  last  f  )r  100.  Only  through 
this  type  or  organized  cost  reduction  can  maximum  savings  be  realized.  Hiis 
type  of  full  cooperation  between  groups  has  made  our  program  at  Martin-Orlando 
a  living  thing.  We  all  work  toward  common  goals  and  individual  goals  and 
these  goals  are  real  and  measurable. 

Let's  be  more  specific.  Let's  look  into  this  Value  Analysis  program. 
Eliminating  unnecessary  functional  costs  does  not  just  happen;  you  must  make 
it  happen.  First  of  all,  since  we  decided  this  must  be  a  plant-wide  program, 
everybody  must  understand  what  Value  Analysis  is  and  why  we  need  it. 

Furthermore,  they  must  understand  Value  Analysis  methods  and  techniques.  In 
other  words,  they  must  understand  what  they  can  do  to  contribute  to  the  program. 
To  achieve  this  understanding,  classes  and  seminars  are  conducted;  pertinent 
articles  and  editorials  are  placed  in  the  company  periodicals.  In  addition,  a 
continuing  promotional  campaign  reminds  people  of  their  duty  and  shows  some 
of  the  results  of  Value  Analysis  throughout  the  plant. 

A  Value  Analysis  team,  lead  by  an  experienced  Value  Engineer,  puts  the 
progi'am  into  effect  on  each  project.  The  team  representatives  come  from 
Finance,  Procurement,  Manufacturing,  Engineering,  etc.  This  group  has  a  full 
time  job.  They  identify  and  analyze  functional  requirements  of  a  system  or 
an  assembly  and  aid  others  on  the  project  who  have  cost  savings  ideas.  Page 
and  line  schedules  are  kept  so  that  management  can  see  how  the  Value  Analysis 
activities  are  progressing,  from  concept  to  implementation.  Budgets  are 
transferred  and  program  personnel  monitor  the  changes,  ensuring  progress.  A 
Value  Analysis  team  should  snow  a  net  return  of  approximately  5-1  on  its 
operating  expenditure.  One  such  team  at  Martin-C^lando  returned  a  net  of 
23-1  over  a  one  year  period. 

Let's  take  one  Value  Analysis  study  item  on  which  this  team  worked  and 
look  at  the  results.  A  standard  tube  clip  has  three  functions;  (l)  Mechanical 
fastener,  (2)  B.F.  Shield,  (3)  Heat  Sink.  Analysis  indicates  that  these 
functions  can  be  performed  for  a  few  cents  each  on  a  volume  basis.  As  a 
result  of  such  an  analysis,  costs  were  reduced  approximately  98%  while 
performing  these  same  functions  with  equal  reliability.  The  Martin-Orlando 
Value  Analysis  organization  has  trained  representatives  in  each  section  amd 
department  of  the  company,  from  procurement  to  the  paint  shop.  These 
representatives  help  promote  the  program  to  their  people,  aid  in  following 
through  on  Value  Analysis  recommendation,  and  record  pertinent  data. 

Our  Value  engineers  go  to  work  on  a  project  when  the  initial  study  is 
being  made  and  continue  their  efforts  through  research  amd  development, 
production  auid  field  support.  During  the  eaurly  stage  of  development  is  the 
best  time  to  accomplish  functional  cost  versus  performance  analysis  before 
tools  or  other  non-recurring  costs  are  fixed,  forcing  implementation  costs 
to  cut  deeply  into  any  savings.  This,  of  course,  is  the  hardest  place  to 
measure  savings,  but  it  is  also  where  simplification  efforts  are  most 
fruitful  in  producing  long  term  savings. 

An  integral  and  vital  part  of  auiy  successful  Value  Analysis  program  is 


the  customer.  His  wholehearted  cooperation  is  a  must.  First  of  all,  the 
customer  can  supply  the  incentive  and  recent  ASPS’ s  and  AFB's  make  this  easier 
to  accomplish.  While  patriotic  duty  and  personal  pride  in  doing  the  best  job 
at  the  lowest  possible  cost  are  fine  incentives,  there  is  nothing  like  the 
possibility  of  increased  company  profits  to  enlist  the  strong  support  of 
management.  For  example,  if  you  reduce  costs  on  fixed  price  contracts  by 
one  million  dollars,  you  have  actually  increased  your  sales  effectiveness 
as  much  as  fifteen  million  dollars.  We  also  have  fixed  price  with  incentive 
clause  type  contracts  at  Mart in-Orlando,  and  in  this  case  both  the  contractor 
and  the  customer  realize  profits  from  Value  Analysis.  Let's  look  at  the  million 
dollar  figure  again.  If  we  share  this  savings  on  a  70-30  percent  basis  with 
the  customer,  we  still  have  a  savings  of  $300,000.  It  would  require  additional 
sales  in  the  neighborhood  of  $4,500,000  to  bring  in  this  kind  of  profit  to  the 
company.  The  customer,  of  course,  has  made  a  savings  of  $700,000.  No  wonder 
Value  Analysis  and  incentive  contracts  win  favor  with  management  and  with  the 
services. 

But,  the  customer's  responsibility  is  not  over  with  the  signing  of  the 
contract.  We  pointed  out  that  these  contracts  enable  us  to  save  millions  of 
dolleirs  but  the  contractor  cannot  save  a  cent  without  the  cooperation  of  the 
customer. 

rhe  customer  has  a  still  bigger  job  if  we  are  to  realize  the  full 
potential  that  the  Value  Analysis  effort  can  produce.  He  must  be  fully  informed 
on  the  contractor's  program;  how  it  is  organized,  how  much  is  being  saved, 
and  he  must  recognize  and  support  the  study  of  potential  savings.  He  must  be 
able  to  sort  out  the  normal  experience  curve  reactions  to  increased  production 
from  the  Value  Analysis  contributions  and  measure  the  contractor's  program  on 
the  basis  of  net  realized  results.  The  customer's  part  is  a  big  one;  he 
must  be  aware  of  the  many  things  he  can  do  to  aid  the  effort  and  he  must  be 
aware  of  the  roadblocks  v/hicii  can  be  placed  in  the  way  of  progress. 

Reaction  times  to  Value  analysis  recommendations  are  critical.  Deriving 
benefits  from  changes  often  depends  on  working  them  into  the  production 
schedule  at  a  certain  time.  A  delay  can  be  costly  or  may  even  negate  any 
advantage  to  the  change.  The  customer  must  be  set  up  to  react  to  Value 
Analysis  suggestions  on  a  30  day  basis  and  should  be  able  to  make  immediate 
decisions  on  simple  problems. 

One  thing  which  would  help  both  the  contractor  and  the  customer  is  a 
technically  qualified  person  from  the  customer's  office  located  in  the 
contractor's  locality,  armed  with  the  authority  to  approve  qualified  change 
recommendations.  He  can  also  assist  in  securing  approvals  from  a  higher 
authority  when  Class  I  changes  are  necessary. 

The  customer's  engineering  staff  and  his  local  representative  must  be 
willing  to  challenge  the  status  quo.  When  the  contractor  finds  a  better, 
mo’'e  efficient  way  to  perform  a  function,  the  customer  must  be  willing  to 
re-evaluate  his  requirements  expeditiously  to  see  if  the  new  way  can  meet 
his  needs  and  vice  versa.  If  a  tolerance  or  finish  is  challenged,  the 
customer  should  look  at  his  specifications  and  decide  if  the  tolerance  or 
finish  is  really  needed  for  this  application.  Again,  prompt  action  and  local 
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authorization  cannot  be  overemphaeized. 

The  ever  increasing  squeeze  on  company  profits  and  the  rising  cost  of 
defense  items  can  be  stopped.  It  takes  a  highly  organized  program,  hard 
work,  and  cooperation  between  the  customer  and  the  contractor.  A  Value 
Analysis  program  can  be  successful.  We  have  made  it  successful  at 
Martin-Orlando . 
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CONTRACTOR  IMPLEMENTATION  OF  A  MAINTAINABILITY  PROGRAM 


W.  ROBERT  GIBSON 

Maytag  Support  Development  Corpo:ration 


Impetus  for  the  generotion  of  a  contractor  maintainability  program  most 
generally  finds  its  origin  in  one  of  four  circumstances;  (1)  specific  direction  from 
the  customer;  (2)  interest  in  the  improvement  of  a  product  line;  (3)  to  meet  or  beat 
competition;  or  (4)  by  uncontrolled  organizationol  evolution.  The  reasons  for  imple¬ 
menting  a  maintainability  program  have  little  influence  on  its  success  other  than  the 
impact  on  the  motivation  of  the  responsible  personnel .  The  ultimate  success  of  the 
program  is  dependent  upon  the  application  of  technically  accurate  engineering 
techniques  and  administratively  sound  management  tools  with  which  to  establish, 
monitor,  control  and  evaluate  maintainability  activities.  These  actions  must  be  in 
technical  consonance  and  appropriately  time  phased  with  the  overall  system  develop¬ 
ment  effort. 


Incorporating  a  maintainability  endc..ivor  into  the  development,  testing 
and  production  cycle  for  a  complex  system  gives  rise  to  administrative  problems  born 
of  any  design  control  or  monitoring  function.  Among  these  are:  increased  overhead 
costs;  additional  coordination,  reporting  and  justification  requirements;  as  well  as^ 
added  paper  work.  Each  of  these  items  represents  an  undesirable  restraint  on  system 
development  and  management. 

The  technical  problems  ossociated  with  the  implementation  of  a  complete 
maintainability  program  are  even  more  serious  and  complex  than  those  presented  by 
administrative  inconveniences.  Since  maintainability  is  a  characteristic  inherent  in 
equipment  configuration,  maintainability  stipulations  must  be  expressed  as  system 
technical  requirements.  These  requiremenrs  must  be:  scientifically  correct;  in  support 
of  the  system  mission;  and  useful  in  developing  design  trade-offs. 

Thus,  the  contractor  is  confronted  with  what  would  appear,  at  first  glance, 
to  be  a  complex  montage  of  "profit-eating"  administrative  and  technical  problems. 

The  severity  of  these  problems  is  overshadowed,  however,  by  somewhat  obscure  con¬ 
tractor  benefits  and  urgency  to  provide  maximum  feasible  ease  and  economy  of 
maintanance  for  military  systems. 
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The  necessity  for  returning  military  equipment  to  service  in  the  shortest 
possible  time  requires  no  explanation.  The  urgency  to  minimize  equipment  maintenance 
expenditures  is  exemplified  by  the  Air  Force  expenditure  last  year  of  over  6  billion 
dollars  for  equipment  maintenance.  By  comparison,  the  notional  debt  created  by  four 
years  of  the  American  Civil  War  was  2.65  billion.  Significant  improvement  in  the 
ease  and  economy  of  complex  electronic  system  maintenance  can  be  attained  through 
improved  maintainability  contracting  methods,  program  control,  program  integration 
and  personnel  motivation. 

CONTRACTING  REQUIREMENTS 


Customer  delineation  of  detailed  operational  requirements  and  system 
support  restraints  is  essential  to  the  realistic  implementation  of  a  contractor  maintain¬ 
ability  program.  In  turn,  contractor  personnel  must  provide  the  cognizant  System 
Program  Office  (SPO)  with  sufficient  mointoinability  planning  information  to  allow 
an  accurate  evaluation  of  the  intended  scope,  depth  and  methodology  of  program 
implementation.  Individual  considerations  and  attendant  priorities  to  be  used  in  main¬ 
tainability  design  trade-offs  should  also  be  included  in  all  proposals  and  statements  of 
work  for  Electronic  Systems  Division  equipment. 

The  basic  goal  of  the  Electronic  Systems  Division  reliability  program  is 
to  provide  the  Air  Force  using  commands  with  electronic  equipment  that  will  perform 
their  designed  functions  for  the  longest  possible  time  without  repair,  adjustment, 
calibration,  equipment  condition  verification  and/or  modification.  The  Electronic 
Systems  Division  maintainability  program  is  directed  toward  supplementing  equipment 
reliability  by  reducing  the  effort,  materials  and  time  required  to  perform  these  actions. 
Equipment  operational  goals  can  best  be  met  by  contractor  system  effectiveness  programs 
that  include  a  well  defined  maintainability  program  that  is  complementary  in  concept 
and  timing  to  other  technical  efforts. 

A.  RELATIONSHIP  TO  MISSION  REQUIREMENTS 

Maintainability  design  requirements  must  be  stated  in  terms  of  the  basic 
mission  for  which  the  equipment  is  intended.  Time  to  repair,  as  the  sole  measure  of 
maintainability,  is  acceptable  only  when  constant  availability  of  equipment  is  essential 
to  achieving  mission  objectives.  The  use  of  interchangeable  equipment  and/or  function 
redundancy,  often  increases  the  time  available  to  perform  maintenance  on  a  functionally 
sub-standard  item.  In  such  a  case,  additional  effort  can  be  directed  toward  attaining 
economies  in  the  types,  complexity,  and  numbers  of  support  tools,  equipment,  facilities, 
materials,  and  personnel  required  to  perform  established  maintenance  actions. 

The  best  trade-off  between  the  ease  with  which  essential  maintenance  can 
be  performed  and  the  economy  of  the  operation  must  be  established  for  each  system, 
sub-system,  assembly,  sub-assembly  and  companent.  As  an  example.  System  X  is 
required  to  meet  a  particular  military  need  in  a  remote  area.  The  cognizant  SPO 
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possibly  would  provide  the  contractor  with  the  following  Items  os  port  of  the  basic 
system  plannir>g  data: 


1 .  Operating  Environment: 

(a)  Self-contained,  trailer-mounted,  for  use  in  temp¬ 
erate  and  near  arctic  locales. 

2.  Maximum  Allowable  Downtime: 


(a)  Five  hours  per  week;  no  single  outage  to  exceed 
one  hour . 

3.  Assigned  Operoting  and  Maintenance  Personnel: 

(a)  Duties:  Required  to  both  operate  and  maintain 
the  radar  system  and  all  supporting  equipment, 
(i.e.,  power  generation  and  distribution, 
communications,  etc.) 

(b)  Skill  Levels:  5  and  7  (minimum  of  2  years  technical 
experience) . 

(c)  Courses  Completed:  Basic  electronics,  OJT  on 
similar  systems,  and  specialist  course. 

4.  Maintenonce  Policy: 

(a)  Repair:  Remove  and  replace  sub-assemblies,  com¬ 
ponents,  and  parts  while  equipment  Is  in  place. 
Repair  of  removed  items  on  site  by  bit  and  piece 
replacement,  with  8  hour  rear  echelon  response  to 
equipment  requests. 

(b)  Calibration:  Not  to  be  more  frequent  than  once 
each  7  operating  days  using  the  tools  and  test 
equipment  provided. 

(c)  Adjustments:  To  be  completed  as  part  of  normal 
operation  using  the  tools  and  test  equipment 
allocated. 

(d)  Functional  Checkout:  To  be  provided  by  a  built-in 
signal  simulator,  comparator  and  readout  system. 
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5. 


Maintenance  Facilities: 


(a)  Work  Area;  6'  x  8'  containing  a  3'  x  5*  work 
bench . 

(b)  Storage  Area;  480  cu.  ft.  capacity  adjustable 
shelving  space. 

(c)  Equipment  Available:  Hand  tools  (kit  contents 
described  multimeters,  VTVM,  oscilloscope 
(specifications)  etc. 

6.  Equipment  Power  Sources:  (Beyond  system  operating  requirements) 

(a)  1  KW  no  -  120  volts,  60  cycle 

(b)  1  KW  no  -  120  volts,  400  cycle  +  1  cycle 

(c)  Pneumatic  -  none 

(d)  Hydraulic  -  none 

Contractor  response  to  these  criteria  should  include  an  outline  of  the  specific 
guidance  to  be  provided  designers  and  system  support  planners  in  the  following  areas: 

(1)  Apportionment  of  allowable  downtime 
between  preventive  rrraintenance, 
calibration  and  malfunction  correction 
for  all  equipment  levels. 

(2)  Restriction  of  circuitry,  physical  layout 
and  packaging  to  accommodate  all  on 
site  maintenance  actions  using  the 
allocated  tools,  test  equipment  and 
facilities. 

(3)  Guidelines  in  the  development  of 
trade-offs  between  downtime,  incorpora¬ 
tion  of  additional  tools,  test  equipment, 
personnel  skill  requirements,  etc. 

It  becomes  apparent  that  developing  a  system  configuration  that  requires  the 
use  of  large,  delicate,  high  power  requirement  support  equipment  is  impractical  in  this 
instance.  The  customer  must  be  given  tangible  evidence  that  the  contractor  design  and 
planning  personnel  are  given  adequate  and  timely  information  concerning  system  technical 
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requirements  and  limitations.  Further  assurance  is  required  by  the  customer  that 
appropriate  methodologies  have  been  provided  to  dynamically  implement  the  above 
guidance. 


Proper  initiation  of  a  realistic  maintainability  program  is  significantly 
effected  by  contractor  identification,  interrelation  and  feedback  of  these  considerations 
to  the  contracting  agency.  This  interchange  of  planning  data  must  be  included  in  the 
technical  proposal  and  continue  throughout  the  design  activity  into  actual  operation. 

B.  DEFINITIVE  GOALS 

The  total  hours  required  for  all  system  iiKiintenance  con  be  directly  related 
to  the  maximum  allowable  downtime  established  for  the  entire  system.  In  a  similar 
manner,  the  total  number,  types,  and  complexity  of  the  tools,  test  equipment  and 
facilities  needed  to  perform  maint^rKince  can  be  easily  compared  to  the  total  allocation 
of  these  items.  Since  any  given  system  is  composed  of  a  series  of  equipment  items, 
each  of  these  entities  must  be  assigned  its  portion  of  the  overall  allocation  of  the  main¬ 
tainability  requirements  outlined  in  MIL-M-26512.  These  goals  must  be  specific  and 
stated  in  appropriate  units  of  measurement  for  the  convenience  of  generating  the 
cumulative  goals  and/or  requirements  in  each  of  the  above  areas. 

As  an  example;  a  unit  of  a  hypothetical  system  has  been  assigned 
the  following  maintainability  goals: 

Mean  time  to  perform  any  mainterwnce  action:  5  minutes. 

Maximum  allowable  downtime:  1  hour  per/100  hours  of 
actual  operation. 

Tool  restrictions:  All  field  maintenance  action  to  be 
completed  requiring  no  more  than  the  following  items: 

1  slot  head,  6'  blade,  insulated  screwdriver;  1  pair  3' 
long  nose  insulated  pliers;  and  1  -  500  watt  soldering 
iron. 

Test  equipment  restrictions:  All  field  maintenance  to 
be  completed  requiring  no  more  than  the  following  items: 

1  shelf-contained  multimeter  (range-specifications); 

1  VTVM  (specifications);!  special  signal  source 
(specifications);  1  oscilloscope. 

Personnel  restrictions:  All  malfunction  recognition, 
isolation  and  repair,  calibration,  adjustments,  and 
preventive  maintenance  must  be  capable  of  being  per¬ 
formed  by  a  single  5  level  mechanic  (detailed  qualifica:^' 
tions)  within  established  time  limits. 
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In  addition  to  the  above  items,  special  restrictions  may  well  be 
imposed  on  the  work  area,  climatic  conditions,  overhaul  cycle, 
preventive  maintenance  cycle,  calibration  accuracies  and 
tolerances,  etc. 

Detailed  maintainability  requirements  must  also  be  stated  for  off-the-shelf 
and  Government  Furnished  Equipment,  as  well  as,  for  new  design.  It  must  be  recognized 
that  the  benefits  gained  from  a  stringently  controlled  maintainability  design  effort  can 
be  negated  by  the  inappropriate  selection  of  an  item  of  GFE  to  be  used  with  a  new  design. 

At  times,  technical  necessities  will  dictate  contractor  receipt  of  a  waiver 
on  a  given  system  support  restriction.  For  instance,  state-of-the-art  limitations  may 
force  the  use  of  test  equipment  that  requires  more  power,  space  and/or  personnel  skills 
than  are  allocated.  Appropriate  adjustments  in  the  system  support  capability  are 
required,  in  such  circumstances,  in  order  that  technical  goals  might  be  met. 

C.  PROGRAM  MILESTONES 

Proper  sequencing,  timeliness  of  program  direction  and  adequate  statusing 
of  maintainability  achievements  are  essential  ingredients  in  the  management  of  a  mean¬ 
ingful  maintainability  program.  All  maintainability  program  actions  must  be  clearly 
identified  and  properly  sequenced  in  order  that  they  might  be  directly  related  to  the 
overall  technical  program  schedule.  Completion  of  certain  maintainability  program 
actions  is  prerequisite  to  the  initiation  of  subsequent  activities.  Specific  activities  in 
the  development  of  good  equipment  maintainability  characteristics  must  be  tied  to 
major  milestones  in  the  technical  program. 

The  sequencing  of  events,  time  periods  and  common  tie  points  established 
between  maintainability  and  system  ^schedules  will  vary  widely  between  programs. 
Certainly,  the  maintainability  program  fora  communication  "black-box"  would  be 
significantly  different  in  the  depth  of  application  than  that  employed  on  a  massive 
search  radar.  It  should  be  noled,  however,  that  the  scope  of  the  maintainability 
considerations  would  be  approximately  the  same  in  both  instances. 

The  following  is  a  listing  of  typical  maintainability  actions  that  are  required 
during  the  various  technical  program  phases; 

TECHNICAL  PROPOSAL 

Stipulate  the  maximum  allowable  expenditures  of  system  support 
resources  on  the  system  and  sub-system  levels. 

Determine  the  maximum  allowable  downtime  for  the  overall  system 
and  the  individual  sub-systems. 
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Develop  the  methodology  for  implementing  the  maintainability 
program  within  the  contractor  organization. 

Prepare  a  detailed  maintainability  program  plan. 

Generate  a  maintainability  program  schedule  of  events  related  to 
the  overall  technical  development  program. 

Predict  equipment  maintairKibility  characteristics. 

INITIAL  DESIGN 


Implement  the  maintairKibility  technical  effort. 

Generate  detailed  maintainability  design  and  planning  direction. 
Monitor  the  design  of  system  equipment. 

Participate  in  design  reviews  prior  to  the  release  of  the  engineering 
drawing . 

Assist  in  the  development  of  design  trade~offs. 

Generate  detailed  data  required  to  plan  training,  technical 
manuals,  spare  parts,  etc. 

EQUIPMENT  FABRICATION 

Monitor  equipment  fabrication  to  determine  specific  assembly 
problems  that  would  be  maintenance  problems  in  an  operational 
environment. 

Monitor  the  checkout  of  newly  fabricated  equipment  to  determine 
the  accuracy  of  the  maintainability  predictions  and  verify  the 
capability  of  allocated  equipment  to  performmecessary  field 
maintenance. 

Prepare  recommendations  for  changes  to  equipment  design  and/or 
maintenance  procedures  in  order  to  eliminate  noted  problems. 

The  actions  listed  above  are  representative  of  the  many  maintainability 
activities  that  must  be  carefully  planned  and  statused  to  assure  proper  program  control. 
Bach  of  the  specific  milestones  determined  by  the  SPO  to  be  important  to  a  given 
program  must  bestiotused  as  part  of  the  contractual  reporting  requirements.  In  addition, 
the  current  status  of  the  maintainability  effort  should  be  continuously  available  for 
customer  inspection . 
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D.  TECHNICAL  RELATIONSHIPS 


Maintainability  is  not  an  end  unto  itself.  Neither  is  the  existence  of  a 
contractor  maintainability  program  a  panecea  for  all  technological  and  logistics  ills. 

It  is  instead,  another  mechanism,  which  when  realistically  applied  in  consonance 
with  other  technical  disciplines,  can  dramatically  improve  total  system  effectiveness. 

The  ease  and  economy  with  which  a  front  panel  gusset  on  an  electronic 
chassis  can  be  removed  and  replaced  in  the  field  is  of  little  concern.  The  reliability 
of  simple  mechanical  devices  of  this  type  is  such  that  maintenance  actions  are  required 
only  as  a  result  of  physical  damage.  Real  concern  for  maintainability  characteristics 
is  generated,  however,  whenever  an  item  of  relatively  low  reliability  is  part  of  an 
operational  system.  The  amount  of  Interplay  between  the  reliability  and  the  require¬ 
ments  for  ease  and  economy  of  maintenance  increases  as  inherent  reliability  decreases. 
Value  engineering,  human  factors,  and  quality  assurance  activities  also  share  common 
Interests  with  maintainability. 

The  requirements  established  and  the  responsibilities  assigned  each  of  these 
areas  within  the  contractor  organization  must  be  carefully  scrutinized  for  points  of 
interface  with  surrounding  areas.  Each  of  these  interfacing  points  must  then  be 
evaluated  in  terms  of  required  data  exchanges  and  elimination  of  duplication. 

It  must  be  recognized  that  maintainability  is  a  system  design  parameter 
that  must  be  included  in  trade-offs  with  other  design  restraints.  The  implementation 
of  a  maintainability  program  must  also  be  accomplished  with  comparable  enthusiasm 
and  technical  integrity  as  that  exhibited  by  similar  programs. 

E.  CONTRACT  STIPULATIONS 

The  military  contract  has,  at  times,  become  an  awesome  thing  to  industrial 
organizations.  In  many  instances,  there  has  been  a  growing  tendency  on  the  part  of  the 
contractor  to  become  less  and  less  specific  in  the  statement  of  the  character,  quality 
and  at  time  the  quantities  of  material  and/or  services  to  be  delivered  to  the  military 
service.  This  tendency  is  not  indicative  of  a  contractor  attempt  to  evade  contractupl 
or  moral  responsibilities.  It  is,  however,  symptomatic  of  the  constantly  tightening 
technical  requirements  that  loom  in  front  of  military  equipment  planners.  These  needs 
are  subsequently  reflected  in  the  specifications  levied  against  the  contractor!.  The 
urgency  of  the  demands  leaves  little  time  to  generate  truly  quantitative  requirements. 
Thus,  a  qualitative  requirement  is  levied  against  the  contractor  that  is  open  to  inter¬ 
pretation  as  to  what  constitutes  an  accurate  statement  of  work,  proper  Implementation 
and/or  satisfactory  performance.  This  sometimes  imponderable  series  of  events  has  led, 
more  often  than  not,  to  extreme  conservatism  on  the  part  of  the  contractor  in  promising 
to  deliver  a  somewhat  etherial  characteristic  in  a  product. 

In  recognition  of  the  contractor's  dilemma,  the  maintainability  technical 
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office  at  Electronic  Systems  Division  Headquarters  has  launched  an  aggressive  in-house 
program  to  identify  system  maintainability  requirements,  methods  of  implementation  and 
standards  of  acceptable  performance  in  specific  detail .  These  requirement'  are  stated 
in  finite  units  of  measure  that  are  related  to  the  true  technical  mission  of  tne  system 
under  consideration.  In  addition,  the  acceptable  level  of  performance  is  specifically 
stated  for  the  guidance  of  the  cognizant  SPO. 

To  date,  one  of  the  major  objections  to  including  maintainability  require¬ 
ments  in  an  incentive  type  contract  has  been  the  inability  to  specifically  state  goals, 
milestones,  and  standards  of  performance.  Electronic  Systems  Division  maintainability 
personnel  are  confident  that  their  recent  activities  in  these  areas  have  negated  this 
objection. 

PROGRAM  CONTROL 

The  difference  between  profit  and  loss  is  control.  Control  in  this  context 
is  not  intended  to  convey  the  idea  of  rigid  adherance  to  a  particular  grouping  of 
previously  established  ground  rules.  Quite  the  contrary,  our  interest  is  in  the  develop¬ 
ment  of  flexibility  of  operation  and  the  capability  to  direct  and/or  redirect  any  portion 
of  the  maintainability  program  with  the  conviction  of  faith  in  the  decisions  reached. 

The  application  of  sound  management  practices  in  conjunction  with  technical  ingenuity 
can  provide  this  kind  of  flexibility  in  any  contractor  maintainability  program. 

A.  IDENTIFICATION  OF  FUNCTIONS 


The  detailed  function  required  in  order  to  effectively  Implement  the  main¬ 
tainability  stipulations  as  set  forth  in  the  bosic  contract  must  be  identified  in  minute 
detail .  Each  of  these  specific  functions  must  then  be  set  forth  in  a  detailed  statement 
of  work  and  related  to  all  other  functions  of  a  similar  nature.  This  examination  of 
function  is  necessary  to  determine  the  best  possible  sequencing  of  events  and  to 
eliminate  duplication.  Following  the  sequencing  of  the  various  required  actions,  a 
detailed  schedule  of  events  must  be  completed  and  coordinated  with  the  system 
schedule  of  activities. 

The  identification  of  detailed  data  requirements  upon  which  to 
base  the  maintainability  program  is  exemplary  of  this  process. 

The  maintainability  data  generation  cycle  begins  with  the 
determination  of  exactly  what  bits  of  information  are  needed 
to  accurately  determine  the  maintainability  characteristics  of 
equipment  design.  Once  identified,  it  becomes  apparent  that 
the  data  can  be  used  in  numerous  other  operations  as  a  basis 
for  logistics  support  planning.  As  an  example,  the  number, 
types  and  frequency  of  required  maintenance  action;  the  tools, 
test  equipment  (standard  and  special)  and  the  numbers,  types 
and  skills  of  personnel  required  to  perform  maintenance 
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activities  are  required  to  determine  the  maintainability  character¬ 
istics  of  a  design.  This  data  is  equally  important  to  persons 
generating  technical  publications,  spare  parts  inventories, 
training  programs,  and  contractor  technical  services.  The 
determination  of  how  the  data  is  to  be  gathered  and  the  method 
of  distribution  and  updating  is  peculiar  to  each  program. 

Accurate  scheduling  of  the  complete  data  gathering  and 
distribution  process  becomes  the  key  to  successfully  controlling 
the  time  and  expense  incurred  in  implementing  this  segment 
of  the  maintainability  program. 

A  similar  process  is  required  in  the  identification,  sequencing,  scheduling, 
implementing,  statusing  and  evaluating  other  maintainability  program  functions. 

B.  DEPTH  OF  IMPLEMENTATION 

The  degree  of  sophistication  in  a  maintainability  program  can  be  judged 
by  the  appropriateness  of  the  depth  of  implementation.  As  mentioned  previously,  the 
number  of  considerations  taken  into  account  in  the  evaluation  of  maintainability 
characteristics  on  any  given  equipment  level  remain  the  same  for  all  types  of  systems. 
The  exteiit  to  which  these  considerations  are  applied,  must  of  necessity,  vary  between 
programs.  It  must  also  be  recognized  tl-K3t  the  amount  of  paper  work  and  internal 
coordination  required  in  the  implementation  of  a  maintainability  program  must  be  kept 
to  some  predetermined  level. 

The  needs  of  the  military  customer  must  be  used  as  the  guidelines  in 
seeking  the  appropriate  level  of  maintainability  activity  for  a  particular  system. 
Anticipated  maintenance  actions  to  be  performed  by  the  using  organization  and/or 
back-up  logistic  support  organizations  are  fundamental  in  determining  required  main¬ 
tainability  characteristics. 

This  process  can  be  exemplified  by  the  case  of  a  hypothetical 
system  to  be  used  in  a  remote  location.  The  nature  of  the  equip¬ 
ment  under  consideratcbn  is  such  that  hermetically  sealed  solid 
state  modules  are  required  in  75%  of  the  circuitry.  Mean  time 
to  repair  limitations  established  by  the  customer  necessitate  the 
use  of  plug-in  modules  for  in-place  removal  and  replacement  of 
faulty  items.  Epoxy  encapsulation  negates  the  possibility  of 
repairing  the  individual  modules,  thus,  eliminating  the  need  to 
perform  maintainability  functions  below  the  complete  module 
level .  A  decision  to  make  each  of  the  modules  repairable  at 
the  field  location  would  change  the  depth  of  Implementation 
required  to  achieve  customer  ease  and  economy  of  maintenance 
goals. 


IID-10 


A  definite  reason  must  be  identified  by  the  contractor  for  each  of  the 
functions  performed  in  the  name  of  attaining  good  system  maintainability.  Inability 
on  the  part  of  the  contractor  to  justify  internal  activities  to  this  degree  is  indicative 
of  poor  program  control . 

C.  PROGRAM  STATUSING 

The  identification  of  functions  and  the  determination  of  the  depth  of 
implementation  to  be  given  those  functions  provides  the  maintainability  program 
manager  with  a  sizing  of  the  work  that  confronts  his  organization.  From  this  point 
on,  the  ability  to  determine  the  exact  point  to  which  the  program  has  progressed 
toward  stated  goals  is  of  extreme  importance.  The  initiation  and  conclusion  of  each 
maintainability  function  must  be  scheduled  with  regard  to  the  overall  technical  program. 
Each  of  the  finite  products  coming  from  these  actions  must  also  be  inserted  into  program 
schedules. 


In  the  case  of  the  maintainability  data  generation  activity,  the 
start  dates  must  be  subsequent  to  the  availability  date  for  the 
data  itself.  The  anticipated  date  of  completion  must  be  prior  to 
the  earliest  need  date  for  the  down  stream  functions  that  the 
data  is  to  support.  The  simplicity  of  this  example  is  almost  absurd, 
however,  this  basic  point  in  program  management  has  been  the 
nemesis  of  numerous  contractor  maintainability  programs. 

The  accurate  status  of  all  facets  of  the  maintainability  program  should  be 
included  in  the  periodic  progress  reports  contractuoMy. required  by  the  SPO.  Accuracy 
in  decisions  to  redirect  a  program  is  largely  dependent  on  the  manogers  ability  to 
specifically  judge  progress  in  relation  to  contractual  requirements. 

O.  MAINTAINABILITY  DEMONSTRATION 

The  actual  accomplishments  of  the  maintainability  effort  must  be  demon¬ 
strated  under  the  requirements  of  MIL-M-26512.  Demonstration  of  the  true  maintain¬ 
ability  characteristics  inherent  in  equipment  design  provide  proof  of  acceptable 
performance  by  the  contractor  and  a  source  of  data  for  further  improving  equipment 
maintainability  characteristics.  Firm  methodologies  must  be  generated  that  allow  the 
efficient  utilization  of  all  maintainability  feedback  information  generated  as  a  result 
of  required  demonstration  and/or  actual  field  experience.  Particular  attention  should 
be  given  to  the  up-dating  of  the  basic  planning  data  from  which  the  logistics  support 
needs  were  originally  derived. 

MOTIVATION  OF  COMPANY  AND  PERSONNEL 

The  genesis  of  a  maintainability  program  may  well  be  the  urgent  demand  of 
the  customer,  but  this  impetus  is  not  sufficient  in  itself  to  adequately  perpetuate  the 
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program  in  a  dynamic  manner.  Sustenance  of  a  top  quality  technical  activity  must  be 
based  on  the  motivation  of  the  individual  personnel  involved  in  the  implementation  of 
the  program.  This  mo.-ivation  is  essential  to  achieving  the  level  of  competent  per¬ 
formance  that  will  make  the  maintainability  effort  truly  meaningful  to  both  the  contractor 
and  the  customer.  The  motivation  for  the  company,  as  a  whole,  is  derived  from  the 
capability  to  define,  control  and  evaluate  the  overall  activities  in  such  a  fashion  as 
to  allow  the  attainment  of  contractuol  goals  within  the  allocated  budget. 

Personal  gratification  in  the  accomplishment  of  a  technical  activity  in  the 
best  possible  manner  is  the  most  effective  motivating  force  for  maintainability  personnel . 
The  availability  of  technically  sound  engineering  aids  and  implementation  mechanisms 
is  the  most  effective  manner  of  instilling  confidence  in  maintainability  personnel . 

A  high  degree  of  technical  integrity  in  a  maintainability  effort  significantly  effects  the 
enthusiasm  of  the  implementing  group,  and  sharply  increases  the  degree  of  program 
acceptance  by  the  design  engineering  staff. 

The  value  of  a  maintainability  program  lies  in  the  ability  to  adequately 
motivate  the  individual  engineer  to  incorporate  MIL-M-26512  requirements  into  his 
every  action.  This  degree  of  motivation  is  in  turn  dependent  upon  the  integrity  of  the' 
technological  foundation  and  the  administrative  methodologies.  Nothing  short  of 
excellence  in  these  areas  will  produce  the  required  results. 

There  is  no  doubt,  that  implementing  a  worthwhile  maintainability 
program  represents  a  challenge  to  contractor  administrative  and  technical  resources, 
hbwever,  these  efforts  are  not  without  significant  reward.  It  has  been  demonstrated, 
that  detailed  definition  of  maintainability  requirements;  realistic  programming; 
technical  integrity  in  design  guidance;  and  meticulous  management  control  will 
generate:  a  simple  design;  time,  manpower,  and  material  savings;  a  more  com¬ 
petitive  product;  and  a  happier  customer. 
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SUMMARY 

The  Minuteman  guidance  system  is  an  example  of  a  complex  electronic 
system  designed  for  extremely  high  availability.  The  basic  system  was 
developed  in  the  absence  of  a  formal  maintainability  program,  though  an 
advanced  model  system  development  program  has  been  started  with  main¬ 
tainability  being  given  serious  consideration. 

The  results  of  the  two  programs  are  reviewed  from  the  maintaina¬ 
bility  viewpoint,  and  the  basic  approach  proposed  for  a  formal  program  is 
presented. 

INTRODUCTION 

As  present-day  electronics  systems  increase  in  complexity,  the 
problem  of  keeping  these  systems  available  for  performing  tasks  for  which 
they  were  designed  becomes  increasingly  significant.  Closely  paralleling 
the  availability  problem  is  the  related  problem  of  the  extremely  high  cost 
of  maintenance  and  repair,  spares,  facilities,  and  redundant  systems 
required  to  ensure  minimum  capabilities  of  the  using  organization.  It  is 
axiomatic  that  one  way  to  minimize  cost  is  to  increase  the  percentage  of 
time  during  which  specific  systems  are  available  to  perform  the  tasks  for 
which  they  were  designed.  Certainly,  new  concept  and  approaches  must  be 
encouraged  and  tried. 

The  Minuteman  guidance  system  is  an  example  of  a  system  developed 
under  a  radical  concept  with  the  objective  of  increasing  system  availability. 
Briefly,  the  concept  was  to  design  a  system  with  reliability  high  enough  to 
preclude  maintenance  during  its  normal  useful  life.  The  actual  reliability 
goals  were  set  surprisingly  high,  considering  the  complexity  of  the  system 
and  the  state-of-the-art.  With  this  concept  it  was  only  natural  that  all  low- 
reliability  components  and  features  of  the  system  had  to  be  either  elimi¬ 
nated  or  redesigned  for  greater  reliability.  For  those  components  or 
features  that  traditionally  were  included  primarily  to  facilitate  maintenance, 
it  seemed  logical  to  simply  eliminate  them  since  no  field  maintenance  would 
normally  be  required  to  repair  failures.  As  a  result,  connectors,  for 
example,  were  eliminated  in  the  early  design  in  favor  of  spot-welded  con¬ 
ductors.  All  electronic'components  were  integrally  packaged  to  facilitate 
functional  considerations  and  minimize  cabling  and  weight.  The  system 
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was  hermetically  sealed  in  a  dome  welded  to  the  base,  and  was  pressurized 
with  an  inert  gas.  An  advantage  of  the  sealed  concept,  in  addition  to  heat 
transfer  considerations,  was  that  higher  reliability  would  result  from  pre¬ 
clusion  of  unskilled  maintenance  attempts.  The  maintenance  concept  for 
the  sealed  package  was  simple.  In  case  of  catastrophic  failure,  the  entire 
sealed  unit  would  be  replaced  with  a  spare  and  returned  to  the  factory  or 
depot  for  repair. 

It  became  apparent  very  early  in  the  development  program,  however, 
that  some  of  the  approaches  were  erroneous,  and,  before  design  was  very 
far  along  some  changes  were  considered  mandatory.  It  was  decided  that 
connectors  would  be  necessary  to  facilitate  removal  of  modules.  Later  in 
the  design  cycle,  it  was  decided  to  repackage  the  modules  to  facilitate 
production  -heckout  and  system  maintenance.  At  some  expense,  the  system 
was  repackaged  in  such  a  way  that  the  computer  could  be  separated  from 
the  rest  of  the  system  after  the  hermetically  sealed  dome  was  removed. 

This  way,  each  could  be  manufactured  and  checked  out  as  separate  sub¬ 
systems.  Further,  whenever  malfunctions  were  discovered  in  the  computer 
during  guidance  system  repair,  the  entire  computer  could  be  quickly  re¬ 
placed  with  a  spare  with  minimum  system  down  time.  No  changes  were 
made  to  the  hermetically  sealed  packaging  concept. 

With  the  hindsight  that  comes  during  the  latter  stages  of  a  program, 
one  sees  clearly  what  should  have  been  done  differently;  at  the  same  time, 
it  is  profitable  to  evaluate  carefully  the  results  of  previous  programs.  In 
the  case  of  the  Minuteman  guidance  system,  it  is  interesting  to  note  that 
some  of  the  basic  changes  were  in  the  interests  of  maintainability.  Further, 
the  maintenance  concept  called  for  all  maintenance  internal  to  the  hermeti¬ 
cally  sealed  package  to  be  performed  at  a  special  depot.  In  the  process  of 
determining  the  tooling  and  test  equipment  required  to  equip  the  depot,  one 
fact  became  evident.  The  depot  maintainability  of  the  guidance  package 
could  have  been  improved  had  there  been  a  specific  program  during  early 
system  design  to  anticipate,  plan,  and  specify  exact  maintainability  param¬ 
eters. 


The  Minuteman  guidance  system  development  program  began  several 
years  before  any  significant  emphasis  was  placed  upon  the  subject  of  main¬ 
tainability  by  the  military  forces  or  by  industry.  At  that  time,  no  specific 
maintainability  requirements  were  placed  on  the  system,  but  many  other 
specifications  and  conditions  relative  to  weight,  volume,  reliability,  en¬ 
vironment,  power,  etc.,  were  imposed  upon  the  development  engineering 
team.  In  some  cases,  compromises  between  conflicting  requirements 
were  necessary  and  trade-off  studies  were  required  to  optimize  the  various 
factors.  It  was  small  wonder,  then,  that  factors  such  as  maintainability. 
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which  were  not  quantitatively  specified  or  imposed  upon  the  development 
team,  were  sacrificed  during  the  trade-off  studies. 


The  Air  Force,  in  mid- 1959,  focused  attention  on  the  subject  of 
maintainability  by  releasing  specification  MIL-M-26512.  Still,  it  was  not 
until  MIL-M-26512A  was  released  in  December  I960,  a  year  and  a  half 
later,  that  a  maintainability  program  was  well  defined.  It  was  during  I960 
that  Autonetics  concluded  there  was  a  need  for  a  separate  organization 
specifically  responsible  for  complete  support  systems  engineering.  The 
result  was  the  establishment  of  a  Logistics  Engineering  Organization 
charged  with  the  responsibility  of  ensuring  adequate  support  of  Autonetics 
products.  Consideration  of  the  approaches  to  be  taken  toward  fulfilling  this 
responsibility  and  influences  brought  on  by  the  emphasizing  of  maintaina¬ 
bility  by  the  Department  of  Defense  led  to  the  establishment  of  a  Maintaina¬ 
bility  Engineering  Unit  within  the  Inertial  Navigation  Logistics  Engineering 
Group.  This  unit  was  assigned  responsibility  for  ensuring  overall  systems 
maintainability,  including  the  influencing  of  prime  equipment  designo  so  as 
to  minimize  support  systems  requirements.  It  was  reasoned  that  the  physi¬ 
cal  location  of  the  Maintainability  Engineering  Unit  within  the  Logistics 
Department  would  help  preserve  the  point-of-view  of  the  using  organization 
when  analyzing  designs  for  maintainability. 

BASIC  MINUTEMAN  GUIDANCE  SYSTEM  MAINTAINABILITY 

Although  no  formal  maintainability  program  was  set  up  for  the  basic 
Minuteman  guidance  system,  considerable  thought  was  apparently  given  by 
the  customer  to  the  problems  of  maintenance  within  the  using  organization. 
The  basic  approach,  however,  was  to  make  the  system  so  reliable  that 
maintenance  tasks  such  as  remove /replace  or  physical  adjustments  would  be 
essentially  precluded.  To  accomplish  the  desired  goals,  an  extensive  and 
comprehensive  reliability  development  program  was  implemented  from,  the 
basic  element  manufacture  through  system  level  design. 

Unfortunately,  the  interpretation  of  reliability  is  commonly  vague.  It 
would  appear  that  many  are  aware  that  the  rigid  definition  of  reliability  -- 
"The  probability  that  a  system  will  not  fail  within  a  specified  time  period 
when  operating  under  specified  design  considerations"  -  -  does  not,  in  fact, 
account  for  all  factors  pertaining  to  effective  use  of  equipment.  Conse¬ 
quently,  the  word  "reliability"  has  been  twisted  to  fit  many  situations  where 
effectiveness  is  actually  under  consideration,  and  the  word  "reliability"  is 
commonly  used  in  place  of  the  word  "availability".  The  end  result  is  con¬ 
siderable  difficulty  in  interpretation  of  quantitative  values. 

The  validity  of  this  observation  is  apparent  from  the  fact  that  using 
organization  maintenance  considerations  turned  out  to  be  primarily  in  terms 
of  availability  rather  than  reliability  alone.  In  a  technical  sense,  certain 
types  of  guidance  system  failures  requiring  circuit  adjustments  occur 
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rather  frequently.  Because  the  missile  is  operationally  unavailable  when 
these  failures  occur,  automatic  scheduled  maintenance  was  designed  into 
the  system  to  offset  the  effects  of  the  failures.  Design  trade-offs  were  re¬ 
quired  to  attain  the  optimum  approach,  and,  as  it  turned  out,  the  results 
serve  as  an  example  of  one  extreme  of  the  manual-to-automatic  spectrum  of 
possible  means  of  performing  maintenance. 

Examples  of  such  automatic  maintenance  are:  recalibration  of  inertial 
instruments,  and  checkout  of  complete  missile  functions  for  in- specification 
performance.  Periodic  recalibration  is  necessary  for  the  inertial  instru¬ 
ments  because  the  scale  factors  and  biases  under  the  present  state-of-the- 
art  can  be  expected  to  drift  out  of  the  extreme  tolerance  requirements  after 
a  certain  period  of  time.  While  these  out-of-tolerance  drifts  do  not  consti¬ 
tute  failures  in  the  sense  that  the  instruments  no  longer  perform,  they  do 
constitute  failures  in  the  sense  that  specified  missile  operation  cannot  be 
met  unless  some  adjustment  is  made  to  regain  in- specification  performance. 
During  the  calibration  procedure,  scale  factors  and  biases  are  also  com¬ 
pared  against  no-go  limits  to  check  for  catastrophic  failure. 

Missile  system  checkout  is  also  required  to  ensure,  to  a  very  high 
probability,  that  missiles  assumed  to  be  ready  for  launch  actually  are 
ready.  Although  failures  requiring  manual  maintenance  occur  at  an  ex¬ 
tremely  low  rate,  failures  will  eventually  occur  and  eventually  all  missile 
systems  will  fail.  The  failures  must  be  discovered  quickly  enough  to  ensure 
operational  requirements  for  ready  missiles  at  the  moment  of  need.  The 
approach  selected  for  accomplishing  system  checks  and  recalibrations  was 
to  use  the  guidance  system  computer  for  automatic  checkout.  The  basic  pro¬ 
grams  for  the  checks  are  stored  in  the  computer,  while  test  sequencing  is 
controlled  by  logic  functions  provided  in  the  operational  ground  equipment. 
Basic  system  status  and  performance  are  checked  every  minute,  and  gyro 
drift  rates  are  checked  every  l6  minutes.  All  failure  detection  is  based 
upon  a  "go,  no-go"  concept,  with  key  circuit  parameters  sampled  and  com¬ 
pared  with  established  limits  stored  in  the  computer  program. 

A  major  design  trade-off  consideration  relative  to  automatic  mainte¬ 
nance  was  the  location  of  computer  circuitry  necessary  for  system  checks, 
but  not  required  for  flight.  Because  weight  is  an  extremely  critical  factor 
relative  to  missile  range,  it  would  be  logical  to  eliminate  everything  from 
the  missile  that  is  not  absolutely  essential  during  flight. 

It  was  determined,  however,  that  the  computer  necessary  for  missile 
guidance  was  capable  of  performing  essentially  all  checkout  requirements. 
Had  additional  requirements  been  placed  on  the  ground,  much  of  the  air¬ 
borne  computer,  including  memory  functions,  would  have  required  duplica¬ 
tion  and  interface  signals  would  have  greatly  increased.  Requirements  for 
buffer  and  driver  amplifiers  would  have  essentially  cancelled  any  potential 
weight  savings  by  the  addition  of  modules  and  connectors.  As  it  turned  out. 
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careful  expansion  of  basic  computer  circuitry  for  flight  increased  the  air¬ 
borne  weight  by  a  very  small  percentage.  The  input-output  communication 
requirements  were  held  to  only  five  encoding  lines  (for  targeting  and 
startup),  and  total  operational- site  reliability  was  increased  through 
reduction  of  components.  Test  sequencing  and  no-go  logic  were  built  into 
the  command  and  control  console  which  basically  provided  encoding  and 
decoding  communications  between  the  missile  system  and  the  launch 
control  facility.  This  approach  lightened  missile  weight  without  the  dis¬ 
advantages  mentioned  earlier,  since  the  necessary  communication  was 
already  available. . 

In  the  normal  operational  mode,  the  Minuteman  guidance  system  is 
considered  to  be  operational  unless  a  no-go  signal  is  received  by  the  launch 
control  facility.  Upon  receipt  of  a  no-go,  a  maintenance  crew  is  dispatched 
to  the  missile  site.  The  troubleshooting  procedure  consists  of  determining 
whether  the  malfunction  is  in  the  missile  or  in  the  operational  ground  equip¬ 
ment.  If  it  is  the  ground  equipment,  the  malfunctioning  drawer  is  replaced. 
If  the  trouble  is  in  the  guidance  system,  an  appropriate  repair  crew  is  dis¬ 
patched  to  the  site  to  remove  and  replace  the  entire  guidance  package.  The 
missile  is  next  activated  and  processed  through  self- checks  and  into  the 
strategic  alert  mode  of  operation.  A  targeting  crew  arrives  then  to  target 
the  missile. 

The  malfunctioned  guidance  system,  after  replacement  with  a  spare, 
is  returned  to  the  special  repair  depot  for  repair.  At  this  point,  the  welded, 
hermetically- sealed  guidance  package  must  be  cut  open  before  any  repair 
can  be  attempted.  From  the  maintainability  standpoint,  this  feature  is  not 
the  most  desirable.  Other  unmaintainable  features,  typical  of  complex 
equipment  designed  to  meet  stringent  weight,  volume  and  performance 
requirements,  are  also  evident.  One  such  feature  is  the  lack  of  test  point 
accessibility  in  some  areas;  another  is  the  subsystem  layout,  which  makes 
it  difficult  to  repair  one  subsystem  without  disassembling  others.  It  is 
difficult  at  this  point  to  determine  what  improvement  could  have  been  possi¬ 
ble  under  the  same  design  considerations  had  maintainability  requirements 
been  formally  specified.  It  is  apparent,  however,  that  the  problems  had 
to  be  overcome  by  the  various  support  elements  provisioned. 

IMPROVED  MINUTEMAN  GUIDANCE  SYSTEM  PROGRAM 

Inevitably,  the  success  of  the  initial  Minuteman  program  brought  on 
demands  for  an  improved  version.  The  result  is  a  new  program  wherein 
a  lighter,  still  more  reliable  and  maintainable  guidance  system  is  being 
developed.  The  increased  requirements  of  performance  flexibility,  relia¬ 
bility,  and  weight  reduction  have  made  it  necessary  to  consider  microcircuit 
electronics.  As  a  result,  new  types  of  maintainability  problems  are  emerg¬ 
ing. 
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Although  the  improved  Minuteman  program  does  provide  for  a  limited 
maintainability  program,  various  factors  have  resulted  in  its  reduction  to 
an  austere  level.  The  effort  began  very  early  in  the  program  as  participa¬ 
tion  with  the  preliminary  engineering  team  and  with  specific  responsibility 
for  determining  the  logistics  concept  and  making  maintainability  recom¬ 
mendations.  A  cost  and  availability  study  was  made  for  various  design 
configurations  of  the  guidance  system  and  maintenance  philosophy. 

Initial  maintainability  recommendations  called  for  a  design  that 
would  allow  remove /replace  of  guidance  subsystems  through  the  side  of  the 
missile  without  the  necessity  for  removing  the  re-entry  vehicle.  This 
approach  would  have  required  a  different  work  platform  than  that  now  pro¬ 
vided  for  the  basic  configuration.  Access  to  the  subsystems  by  removable 
missile  skin  or  pullout  design  would  have  to  be  provided;  sufficient  test  point 
accessibility  and  test  equipment  would  be  desirable,  with  maximum  use  of 
the  guidance  system  computer  utilized  in  conjunction  with  the  test  equipment. 
A  positive  safety  device  to  disarm  all  ordnance  squibs  and  the  re-entry 
vehicle  would  be  required  to  prevent  accidents  during  hot  tests. 

The  philosophy  was  desirable  from  a  cost  and  missile  availability 
standpoint.  Direct  support  cost  could  be  lowered  because  demand  for 
heavy  equipment  for  removing  the  re-entry  vehicle  and  guidance  package 
and  associated  crews  could  be  eliminated  and  a  complete  guidance  system 
spare  would  seldom  be  required.  Subsystem  spares  and  portable  test  equip¬ 
ment  could  be  carried  by  the  fault  isolation  crews. 

It  was  quantitatively  shown  that  since  the  missile  in-commission 
availability  was  already  extremely  high,  a  reduction  in  the  out-of- 
commission  time  would  not  significantly  increase  the  availability  of  the 
missile.  However,  reducing  the  out-of-commission  time  would  signifi¬ 
cantly  reduce  the  equivalent  dollar  cost  of  "spare"  missiles  and  using 
organization  complexes  while  preserving  overall  effectiveness. 

It  was  determined,  however,  that  weight  would  be  excessive  due  to 
structural  requirements.  As  it  turned  out,  the  subsystem  that  would  have 
to  be  removed  most  frequently,  the  stable  platform,  is  also  the  heaviest 
and  most  cumbersome  package  requiring  the  most  care  in  shock  and  vibra¬ 
tion  isolation.  This  consideration  reduced  attractiveness  of  providing  for 
partial  guidance  subsystem  maintenance  at  the  using  organization  level. 

Another  approach  investigated  was  the  possibility  of  replacing 
guidance  subsystems  from  the  top  of  the  missile  with  the  re-entry  vehicle 
removed.  Structural  problems  requiring  control  of  the  center-of-mass  of 
the  system  made  it  desirable  to  mount  packages  on  the  underside  of  the 
basic  structure.  This  requirement  caused  the  packages  to  be  inaccessible 
with  the  guidance  package  mounted  to  the  missile  third  stage.  Therefore, 
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the  cost  advantage  was  decreased  to  only  the  difference  between  the  cost  of 
a  complete  system  spare  and  subsystem  spares. 

As  must  be  expected,  not  all  recommendations  relative  to  maintaina¬ 
bility  can  be  incorporated  into  any  program.  In  the  case  of  the  Minuteman 
improved  guidance  system,  overriding  requirements  included  safety, 
structural  problems,  weight  limitations,  and  a  desire  not  to  significantly 
change  the  maintenance  concept  for  the  using  organization. 

Through  close  coordination  with  the  responsible  design  engineers, 
however,  significant  improvement  is  contemplated  in  the  system  packaging 
concept  which  represents  a  compromise  between  optimum  design  from  the 
maintainability  point-of-view  and  other  requirements.  Basically,  the  single, 
welded,  hermetically- sealed  guidance  package  is  being  eliminated  in  favor 
of  several  subsystem  packages.  .This  one  change  alone  represents  a  vast 
improvement  in  system-level  maintainability.  In  addition,  low  power  level 
flight  control  electronics  from  all  three  missile  stages  will  be  packaged  within  the 
guidance  system.  This  change  increases  the  missile  third  stage  weight 
slightly,  but  overall  missile  maintainability  will  be  vastly  improved.  Many 
control  unit  failures  which  require  removal  of  the  complete  missile  in  the 
basic  configuration  can  be  corrected  on  the  improved  system  by  removal  of 
the  guidance  and  control  package  only. 

In  addition  to  easily  removed  packages,  it  is  planned  that  the  separate 
outer  skin  of  the  basic  system  will  be  eliminated  in  the  improved  system, 
the  complete  wiring  harness  w’ill  be  easily  removed  in  one  piece,  and  cooling 
lines  will  feature  quick  disconnects.  Mounting  fasteners  will  be  of  a  com¬ 
mon  type  and  minimum  amount.  Basic  design  criteria  yet  to  be  determined 
include  system  level  test  point  requirements,  and  access  and  internal  pack¬ 
aging  of  the  subsystem. 

GENERAL,  MAINTAINABILITY  PROGRAM 

The  course  of  events  surrounding  the  Minuteman  guidance  system 
development  has  been  encouraging  in  a  number  of  respects  relative  to 
advancement  in  the  field  of  maintainability.  It  is  apparent  that  there  are 
still  many  opinions,  on  the  part  of  both  customer  and  contractor,  as  to  the 
extent  of  need  for  maintainability  program,  scope  of  such  programs,  and 
approach  of  the  program.  On  the  other  hand,  the  fact  that  there  is  cur¬ 
rently  a  program  contracted  for  proves  that  there  is  general  agreement 
that  maintainability  must  be  given  serious  consideration. 

Currently,  there  is  very  little  theoretical  work  available  relative  to 
techniques  and  procedures  that  will  permit  maintainability  problem  areas 
to  be  crystalized  or  particular  areas  to  be  evaluated  and  compared  with  an 
operational  system  as  a  whole.  The  problem  faced,  then,  when  embarking 
upon  a  full-scale  maintainability  program,  is  how  does  one  actually 
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accomplish  the  desired  intention  of  a  basic  program.  It  is  reasonable  that 
sound,  realistic  approaches  for  accomplishing  the  desired  intentions  of 
maintainability  programs  must  be  developed  and  presented  if  proposed 
programs  are  to  be  accepted.  The  approach  taken  relative  to  Minuteman 
guidance  was  that  systems  analysis  from  a  maintainability  point-of-view 
must  become  common  if  true  design  for  maintainability  is  to  ever  occur. 
Solid  trade-offs  must  be  possible  with  other  design  objectives.  Based  on 
these  concepts,  a  study  was  initiated  to  define  all  the  significant  parameters 
and  their  relationships.  Fundamental  techniques  were  developed,  and  the 
use  of  advance  probability  techniques  and  transfer  function  theory  was  found 
to  be  highly  useful  in  evaluating  parameter  relationships  and  their  meaning 
to  the  prime  hardware  and  its  support  elements. 

The  basic  program  is  essentially  in  accordance  with  specification 
MIL-M-26512B;  however,  there  is  much  left  unsaid  in  this  specification 
relative  to  how  its  requirements  can  actually  be  implemented.  For  com¬ 
pleteness,  the  overall  prevailing  philosophy  as  to  program  requirements  is 
briefly  reviewed. 

First,  a  maintainability  program  involving  integrated  maintainability 
design  optimization  between  subsystems  and  the  support  system  must  be 
accomplished  by  a  single  responsibility  to  be  effective.  The  reason  is  that 
maintainability  is  not  a  function  of  hardware  design  alone,  but  of  the  support 
environment  and  maintenance  procedures  as  well.  It  is  possible  for  a  given 
equipment  design  to  be  highly  maintainable  in  one  maintenance  environment 
and  grossly  unmaintainable  in  a  different  environment.  Under  such  situa¬ 
tions,  it  becomes  impossible  to  simply  specify  design  goals  and  expect 
individual  design  engineers  to  meet  them  without  providing  relatively  de¬ 
tailed  specifications  as  to  the  planned  test  equipment,  maintenance  pro¬ 
cedures,  throw-away  level,  personnel,  and  troubleshooting  logic  with 
respect  to  the  system,  subsystems,  and  lowest  level  reparable  component. 

The  problem  of  optimizing  all  factors  and  possibilities  to  the  greatest 
extent,  relative  to  maintenance,  requires  a  true  systems  engineering  type 
analysis  and  study,  and  requires  high-caliber  technical  personnel.  Basic 
design  and  support  decisions  must  be  made  during  study  and  preliminary 
design  phases,  and  must  satisfy  all  other  design  criteria.  These  decisions 
must  be  made  such  that  a  high  probability  exists  that  detailed  design  for 
maintainability  of  the  prime  equipment  and  the  support  system  will  bear  out 
the  preliminary  design  decisions.  Thorough  studies  are  required  to  deter¬ 
mine  the  most  optimum  combination  of  support  system  and  prime  equipment 
system  design  that  will  allow  the  other  design  criteria  and  the  operational 
requirements  to  be  met.  In  making  these  studies,  a  full  appreciation  of  the 
various  means  for  carrying  out  the  detailed  design  is  required.  A  variety 
of  systems  engineering  analytical  tools  are  necessary  to  adequately  handle 
the  many  interrelated  parameter s,  and  hardware  functional  concepts  must 
be  thoroughly  understood.  In  addition,  the  characteristics  of  the  various 
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support  elements  and  their  costs  must  be  well  understood.  Finally,  of 
extreme  importance,  the  customer's  operational  environment  must  be 
understood  in  depth,  and  all  interface  criteria  must  be  coordinated  with  the 
customer  and  associate  contractors.  The  task  can  be  very  challenging! 

After  preliminary  design  decisions  are  made,  detailed  designs  must 
be  continuously  examined  to  ensure  that  the  basic  intent  of  the  maintaina¬ 
bility  program  is  actually  being  carried  out  and  to  make  further  recom¬ 
mendations  where  maintainability  problems  exist.  Test  points,  built-in  test 
equipment,  test  point  isolation,  and  logical  packaging  must  be  determined. 
Input  and  output  interface  design  and  corresponding  checkout  confidence 
levels  for  adequate  interchangeability  must  be  specifiedand  designs  reviewed 
to  ensure  that  spares  availability  goals  will  be  met  and  that  unnecessary 
maintenance  time  will  be  reduced.  These  activities  require  close  coordina¬ 
tion  with  the  design  engineers  who  design  the  prime  equipment,  and  with  the 
maintenance  analysis  engineers  who  determine  detailed  test  equipment  and 
other  support  requirements.  All  of  the  engineers  must  be  provided  with  the 
basic  maintainability  guideline  criteria  specified  in  updated  documents  for 
that  purpose  or  in  other  internal  control  specifications.  In  addition,  tech¬ 
nical  manuals  and  training  courses  should  be  considered  and  recommenda¬ 
tions  made.  The  basic  intent  is  to  ensure  that  the  many  contributors  to  the 
maintainability  of  a  large  complex  program  are  developing  about  a  single 
philosophy. 

Early  in  the  program,  an  overall  analysis  should  be  performed  to 
predict  the  maintainability  and  availability  likely  to  result  at  the  time  of 
analysis.  As  the  program  progresses,  analysis  must  be  maintained  current 
so  that  there  will  be  a  high  degree  of  confidence  that  the  required  maintaina¬ 
bility  will  be  achieved  at  demonstration  test  time.  Also,  a  valuable  tool  is 
available  for  determining  the  areas  that  are  major  cause  s  of  a  lack  of  requir¬ 
ed  system  maintainability. 

Prior  to  customer  acceptance  of  the  equipment  design,  a  maintaina¬ 
bility  demonstration  test  should  be  performed.  It  is  obviously  impractical 
to  simulate  all  possible  failures  in  a  complex  system  enough  times  to 
obtain  a  minimum  sample  size  to  calculate  the  achieved  maintainability  with 
maximum  confidence.  All  tests,  therefore,  must  be  carefully  chosen,  and 
something  less  than  guaranteed  accuracy  must  be  acceptable.  Specifica¬ 
tion  MIL-M-26512B  provides  considerable  guidance  in  the  area  of  test 
selection. 

Simulation  of  the  test  environment  can  also  present  a  problem. 

Ideally,  the  test  environment  should  duplicate  the  customer  field  environ¬ 
ment  after  the  learning  curve  period.  In  normal  cases,  it  is  impossible  to 
duplicate  exactly  the  field  environment  even  at  the  beginning  of  the  learning 
curve  since  deliverable  field  test  equipment  normally  is  not  available  at  the 
time  the  test  is  conducted,  even  if  it  has  already  been  designed.  A  similar 
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situation  exists  regarding  personnel,  facilities,  and  manuals.  When  all  test 
results  are  assimilated,  some  correction  factor  must  be  applied  to  account 
for  such  conditions. 

Another  problem  in  establishing  the  test  plans  is  the  assembly  level 
and  maintenance  organization  level  at  which  tests  will  be  conducted.  If  the 
assembly  and  test  contractor  is  to  conduct  the  tests  on  a  complete  system, 
then  subsystem  test  requirements  must  be  well  coordinated  with  the  con¬ 
tractor. 

There  are  many  other  considerations  which  must  be  made  in  planning  a 
maintainability  demonstration  test,  such  as  cost  and  subcontractor -supplied 
equipment.  An  early  start  is  essential  to  ensure  adequate  preparation. 
Specification  MIL-M-26512B  requires  that  a  final  test  plan  be  submitted  to 
the  Air  Force  60  days  prior  to  scheduled  first-article  delivery.  The  pre¬ 
liminary  plan  should  be  submitted  much  earlier,  and  an  explanation  of  the 
plan  for  test  result  analysis  should  be  included. 

An  acceptable  maintainability  demonstration  test  should  not  end  the 
maintainability  program.  All  effort  up  to  first-article  delivery  will  only 
ensure  to  a  high- confidence  level  that  maintainability  of  the  system  in  the 
field  will  be  acceptable.  There  can  be  no  complete  guarantee  that  main¬ 
tainability  in  the  field  will  be  acceptable  until  it  is  demonstrated  in  actual 
field  environment  after  the  learning  curve  becomes  reasonably  constant.  To 
accomplish  final  evaluation,  a  data  system  is  required  that  allows  the  final¬ 
ized  key  parameters  of  the  availability /maintainability  analysis  conducted 
during  the  development  program  to  be  determined.  If  key  parameters  fall 
within  the  predicted  values,  it  can  be  assumed  that  field  maintainability 
goals  have  been  achieved.  If  not,  a  plan  must  be  developed  to  identify  the 
reason  and  determine  corrective  action.  This  effort  can  be  achieved  by 
treating  all  field  deficiency  data  in  the  same  manner  as  any  other  operation¬ 
al  effectiveness  problem,  such  as  design  deficiency,  low  reliability,  and 
inadequate  manuals  or  training.  The  important  point  is  that  corrective 
action  is  taken  as  a  continuing  part  of  the  maintainability  program  begun 
during  initial  study  phases  of  the  system  design,  using  and  modifying  the 
same  maintainability /availability  model  developed  then. 

To  implement  the  program  outlined  above,  the  following  standard¬ 
ized  statement  of  work,  which  could  be  included  in  a  proposal  or  contract, 
is  presented: 

A.  During  the  preliminary  design  phase,  determine  the  necessary 
mean-time-to-repair  (MTR)  goals  to  ensure  intended  mission 
effectiveness.  This  determination  will  necessarily  include 
formulation  of  an  operational  availability  model  and  subsequent 
analysis  to  establish  relationship  between  MTR,  MTBF,  and 
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reaction  time  goals  for  the  specific  mission.  This  analysis  is  to 
be  based  upon  operational  and  higher  assembly  operating  require¬ 
ments,  and  the  equipment  functional  concept. 

B.  Eharing  the  preliminary  design  phase,  establish  goals  for  system 
repairability,  spares  availability,  maintenance  equipment  availa¬ 
bility,  and  mean -task -time  (MTT)  for  each  operational  mode 
required  in  the  overall  mission  cycle  so  that  the  overall  MTR  goal 
for  each  mode  can  be  realized. 

C.  During  the  preliminary  design  phase,  establish  a  list  of  all  ex¬ 
pected  maintenance  actions  for  each  operational  mode,  including 
remove /replace,  adjustments,  tuneups,  scheduled  and  non - 
scheduled  actions,  etc.  Using  goal  operational  reliability  MTBF's 
for  each  action,  determine  budget  goal  MTT's  for  each  expected 
action.  Specify  in  internal  control  specifications. 

D.  Determine  the  firm  Logistic  Concept  (including  maintenance 
philosophy)  for  the  system.  The  Using  Level  maintenance  concept 
to  be  based  upon  analysis  of  the  budget  goal  MTT's,  preliminary 
system  functional  operation,  and  certain  operational  and  support 
considerations.  Specify  necessary  requirements  in  internal  con¬ 
trol  specifications. 

E.  Conduct  design  reviews,  working  closely  with  the  design  engi¬ 
neers,  to  evaluate  component,  subassembly,  and  system  design 
in  terms  of  capability  to  meet  required  MTT's  while  conforming 
to  the  established  maintenance  philosophy.  Consider  packaging, 
test  points,  built-in  test  equipment,  test  isolation  requirements, 
interchangeability,  checkout  specifications,  etc,  for  all  levels  of 
maintenance.  Make  necessary  design  recommendations  or 
revision  to  MTT  budget  goals  or  maintenance  philosophy  as 
resulting  from  trade-off  studies,  keeping  in  mind  that  overall 
mission  effectiveness  in  the  field  is  the  ultimate  goal.  Document 
and/or  specify  all  requirements  assumed  for  personnel,  facilities, 
training,  manuals,  support  equipment,  spares,  etc,  to  ensure  a 
basis  for  designing  the  necessary  requirements  into  the  support 
system.  Maintain  current  a  prediction  of  achieved  values  for  all 
MTT  budget  goals,  overall  MTT  goal,  and  MTR  goal  as  based  on 
the  continuing  evaluation  and  analysis. 

F.  Publish  and  maintain  a  "design  for  maintainability  handbook"  for 
design  engineers,  including  general  system  philosophy  and  re¬ 
quirements;  maintenance  task  level  requirements  and  philosophy. 
Update  as  required  to  prevent  gross  misrepresentation  of  latest 
requirements. 
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G.  Perform  special  studies  as  required  to  determine  the  validity  of 
support  assumptions  made  or  proposed  for  MTT  evaluation  rela¬ 
tive  to  economic  and/or  functional  feasibility;  complex  trade-off 
studies  requiring  adjustment  of  availability,  reliability,  reaction 
time,  and  other  goals;  realistic  support  equipment  requirements 
relative  to  cost  (automatic  vs  manual,  etc);  and  other  area  effect¬ 
ing  the  MTT.  Develop  special  tests,  conduct  or  monitor  tests, 
and  analyze  test  results  to  establish  most  suitable  system  design 
where  paper  analysis  is  not  conclusive  or  satisfactory. 

H.  Formulate  an  adequate  Maintainability  Demonstration  Test  Plan, 
obtain  customer  approval,  determine  and  procure  special  facility, 
personnel,  or  support  equipment,  conduct  tests,  analyze  tests, 
and  project  results  in  terms  of  field  operation.  Make  recommen¬ 
dations  and  adjustments  in  support  system  requirements  as  feasi¬ 
ble,  if  goal  maintainability  is  not  indicated.  (To  be  part  of  the 
pre-first-delivery  demonstration  tests  for  operational  hardware.  ) 

I.  Formulate  an  Achieved-Field-Maintainability  Evaluation  Plan, 
obtain  customer  approval,  collect  and  analyze  data  in  the  light  of 
R&D  analysis,  and  make  applicable  recommendations.  To  be 
conducted  as  part  of  the  operational  data  analysis  program  to 
determine  weapon  system  effectiveness  and  perform  corrective 
action.  (This  effort  may  be  funded  on  a  separate  contract  from 
the  R&D  contract.  ) 

NOTE:  In  some  cases,  items  A,  B,  and  C  may  be  partially 

accomplished  on  a  study  program  funded  separately  from 
the  R&D  contract. 

MAINTAINABILITY  THEORY  AND  APPLICATION 

It  is  essential  to  have  a  theoretical  understanding  of  the  relationship 
of  the  many  parameters  influencing  maintainability  and  availability  if  trade¬ 
off  studies  and  maintainability  analysis  and  prediction  are  to  be  anything 
more  than  intuitive  in  nature.  Lack  of  a  general  theory  is  the  main  stum¬ 
bling  block  for  effective  maintainability  programs. 

The  theory  and  techniques  upon  which  the  Advanced  Minuteman 
guidance  system  maintainability  program  was  proposed  in  briefly  pre¬ 
sented. 

The  goal  for  system  designs  should  generally  be  to  achieve  the  re¬ 
quired  operational  availability  to  perform  the  "ultimate"  mission  with  the 
lowest  possible  total  cost  consistent  with  performance  requirements. 
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DEFINITION:  Availability  is  defined  as  the 
expected  percentage  of  time  specified  per¬ 
formance  will  be  obtained  out  of  a  specified 
interval  of  time. 

By  general  observation  of  existing  systems,  it  can  be  concluded  that 
"ultimate”  mission  effectiveness  of  a  system  may  be  accomplished  by  prior 
operation  in  submission  modes  such  as  standby-off  and  standby-on  modes. 
The  ultimate  mission  effectiveness  is  therefore  often  a  function  of  submode 
operational  availabilities  (Figure  1). 


Figure  1.  Ultimate  Mission  Effectiveness  as  a  Function  of 
Submode  Operational  Availabilities.  Among  other  factors, 
system  effectiveness  is  a  function  of  being  operationally  availa¬ 
ble.  Availability  for  the  ultimate  mission  may  be  a  function  of 
sub  mission  mode  availabilities. 


This  leads  to 


A  =  A.  -  A' 

O  1C  o. 

ic 


(1) 


where 

A  =  operational  availability  for  any  given  mission  mode  and 
where 

A^  +  A'^  =  1,  where  A^'  signifies  unavailability,  or  "not"  available 


A. 

1C 


availability  of  in-commission  equipment 


A' 


o. 

1C 


operational  unavailability  even  though  the  equipment 
is  in  commission.  Includes  such  parameter s  as 
reaction  time. 
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Ajg,  becomes  the  parameter  of  interest  here.  If  a  system  is  out-of¬ 
commission  (scheduled  or  unscheduled)  it  needs  maintenance.  If  it  is 
agreed  that  maintainability  somehow  measures  efficiency  of  maintenance, 
then  will  contain  the  maintainability  parameter. 

The  average  or  probable  time  a  system  is  in  commission  can  be 
defined  as 


T, 

A  = _ _ 

ic  T.  +  T 

1C  oc 


T. 

1C 

T 

m 


(2) 


where 


T.  =  sum  of  time  in  commission  within  t 
1C  m 


T  =  sum  of  time  out  of  commission  within  t 
oc  m 


T  =  a  specified  mission  time,  where  'mission'  is  used  in  a 
broad  sense. 

The  parameter  of  interest  is  T^^,.  If  lower-case  t  represents  individual 
time-instances  within  total  time  T,  then 


n 

T  =  .fli  t  =  t  +  t  + 
oc  oc.  oc,  oc_ 

1=1  1  1  2 

where 


+  t  =  n  t 
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+  . 
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(4) 


The  number  of  down  instances,  n,  can  be  expected  to  be. 


n  =  \  .  T.  +  \  T 

1C  1C  oc  oc 


(5) 


Where  \  and  \  qc  are  the  "quasi"  failure  rates  of  the  systems  when  in 
commission  and  out  of  commission  respectively.  "Quasi"  failure  rates 
differ  from  the  usual  failure  rate  in  that  the  quasi  failure  rate  is  not  limited 
to  inherent  failures  resulting  from  proper  application,  but  includes  all 
forms  of  mishandling.  In  short,  it  is  the  "operational"  failure  rate.  Also, 
in  this  simplified  derivation,  Xq^  is  "adjusted"  to  account  for  the  fact  that 
<|>  failures  during  T^^  does  not  necessarily  mean  4>  tJc  time  contributed 
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From  (3)  and  (5) 
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For  the  case  where  X  T  .?  T. 

oc  oc  1C  1C 


A. 
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T.  +  T.  ~  1  +*?*  X. 

1C  oc  1C  1C  oc  1C 


If  t'  -  MTR  =  a  "statistical  measure"  of  maintainability, 
oc 

and  X  =  1/MTBF  =  operational  failure  rate, 
ic 

Then 


(6) 


(7) 


(8) 


A.  =  (as  shown  in  MIL-M.26512B  if  MTR  is  (9) 

f  replaced  by  M) 

The  above  process  defines  the  basic  relationship  of  maintainability  to 
operational  availability.  The  intent  is  according  to  specification  MIL-M- 
Z6512B.  However,  the  simplicity  of  MIL -M -2651 2B  definitions  can  be 
misleading  to  those  who  have  not  thoroughly  studied  the  subject.  It  is 
sufficient  to  comment  that  MIL-M-26512B  should  be  revised  to  eliminate 
possible  confusion  among  the  users.  While  equation  (9)  represents  the 
basic  definition  of  system  A.  for  some  mode  of  operation,  it  is  also 
useful  to  write. 


A. 

1C 


ic 


A. 
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i=l 


1C 
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(10) 


where 


A.  =  "  task"  or  "subsystem"  availabilities  of  a  "series"  system, 
i 

A  "task"  availability  may  be  useful  where  it  is  desired  to  determine 
system  availability  in  terms  of  all  possible  maintenance  tasks  required  to 
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repair  all  possible  malfunctions  in  a  system.  "Subsystem"  availabilities 
may  be  desirable  where  several  independent  subsystems  make  up  a  system 
and  it  is  desirable  to  control  the  design-for -availability  of  each  subsystem 
separately. 

The  notation  of  equation  (10)  is  valid  only  for  a  "series"  system,  or  a 
system  wherein  if  any  one  subsystem  is  unavailable,  the  system  is  un¬ 
available.  Equation  (10)  requires  reformulation  for  "parallel"  (redundant) 
and  for  "series-parallel"  systems.  All  major  Minuteman  subsystems  are 
in  series.  Also,  all  subsystems  of  the  guidance  system,  which  is  a  sub¬ 
system  of  Minuteman,  are  likewise  in  series. 

In  this  paper,  MTR  is  roughly  equivalent  to  M  in  specification  MIL-M- 
26512B.  However,  MIL-M-26512B  indicates  that  M  assumes  that  100- 
percent  support  is  available.  The  previous  derivation  for  A^c  resulting  in 
equation  (9)  shows  the  same  form  as  given  in  MIL-M-265 1 2B,  but  is  based 
upon  total  downtime  in  a  specified  time  interval.  It  is  well  known  that  it  is 
common  for  equipment  to  be  out-of-commission  for  periods  of  time  much 
longer  than  active  maintenance  time  due  to  lack  of  spares  or  test  equipment 
or  other  elements  of  support.  It  is  axiomatic  that  100-percent  support 
cannot  be  guaranteed.  The  cost  of  support  rises  exponentially  as  the  proba¬ 
bility  of  having  full  support  at  a  given  time  and  location  increases. 

From  an  overall  cost  viewpoint  there  exists  a  trade-off  between 
probability  that  support  is  available  (converted  to  the  time  intervals  for 
which  there  is  no  support  per  maintenance  occurrence)  and  "active"  mainte¬ 
nance  time.  There  is  not  usually  a  great  overall  advantage  to  being  able  to 
quickly  go  through  the  motions  of  maintenance  only  to  insert  long  waiting 
time  intervals  between  beginning  and  end  of  a  maintenance  task.  A  spare 
system  must  be  placed  in  operation  to  take  the  place  of  the  out-of¬ 
commission  system  in  any  event. 

It  is  true  that  for  maintainability  demonstration  tests,  it  is  impracti¬ 
cal  to  simulate  support  availability;  therefore,  100-percent  support  must  be 
assumed.  This  assumption  reduces  the  test  to  the  case  of  measuring  mean- 
task-time  (MTT)  only,  which  is  satisfactory  for  test  purposes  if  the  results 
are  properly  interpreted. 

During  design  evaluation  and  determination  of  goals,  however,  it  is 
necessary  to  properly  consider  the  design  requirements  of  the  elements  of 
support  in  order  to  determine  the  MTT  requirements  and  spares  availa¬ 
bility  (Ag)  requirements.  Design  review  activity  directly  deals  with  both 
parameters;  MTT  primarily  with  factors  such  as  test  points,  packaging, 
and  built-in  test  equipment;  Ag  primarily  with  interchangeability,  which  is 
a  function  of  interface  design  tolerances  and  ranges,  and  of  checkout  toler¬ 
ances  and  thoroughness. 
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This  rational  leads  to  Figure  E,  which  illustrates  a  functional  block 
diagram  relationship  for  MTR.  MTT  appears  to  most  closely  approach  M 
in  MIL-M-26512B. 

In  Figure  2,  MTT  is  shown  to  be  a  function  of  n  tasks,  each  of  which 
is  a  function  of  malfunction  isolation  time,  correction  time,  and  verification- 
of-repair  time.  It  is  often  convenient  to  examine  task  times  in  terms  of  the 
three  latter  parameters.  The  parameters  in  Figure  2  that  are  not  assigned 
a  particular  notation  must  be  determined  in  detail  for  each  specific  equip¬ 
ment  design  and  support  environment  in  most  cases. 

It  is  well  to  make  several  pertinent  points  at  this  time; 

1.  All  parameters  leading  to  can  be  handled  either  as  system 
average  values,  with  some  dispersion  about  the  mean,  or  as  sub¬ 
system  values.  Laws  of  statistics  must  be  observed.  Few  param¬ 
eters  dealt  with  can  be  considered  as  absolute  values,  except  for 
limited  applications. 

2.  If  normal  weapon  system  operation  within  the  using  organization 
consists  of  several  submode  operational  availabilities  (Figure  1), 
simultaneous  consideration  of  corresponding  parameters  must  be 
made.  Parameter  values  may  be  drastically  different,  i.  e.  ,  in 
one  mode  of  operation  a  given  malfunction  may  be  corrected  by 
replacing  the  system;  in  another  mode  by  replacing  a  drawer; 
while  in  another  by  replacing  a  module  within  the  drawer,  which 
is  still  in  the  system. 

3.  Designed-in  waiting  time,  t^,  must  be  considered  in  MTT.  This 
is  largely  a  function  of  the  normal  support  environment.  When 
evaluating  MTT,  while  assuming  100-percent  support,  this  factor 
cannot  be  ignored  since  it  exists  even  if  the  planned  support  is 
available.  Such  factors  as  time  to  warm  up  test  equipment, 
assemble  repair  gear,  and  fetch  a  spare  are  intended  to  be  part 
of  tw  as  opposed  to  the  time  lost  if  the  test  equipment  is  inopera¬ 
tive,  or  if  supply  is  out  of  spares. 

4.  Figures  1  and  2  apply  to  the  using  level.  All  levels  of  mainte¬ 
nance  above  the  using  level  are  for  the  sole  purpose  of  keeping 
spares  available  at  the  using  organization.  If  the  cost  per  new 
spare  is  less  than  the  cost  per  overhauled  spare,  then  a  throw¬ 
away  policy  should  be  implemented,  assuming  emergency  require¬ 
ments  dbesnotexcessivelyincrease  inventory  requirements  for  new 
spares. 
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Figure  2.  MTR  Relationship 


IIE-18 


Thus,  the  requirements  on  Ag  will  influence  many  higher  level 
maintenance  factors,  such  as  mean  turn  around  time,  emergency 
supply  techniques,  etc. 

Although  not  applicable  in  exactly  the  same  sense.  Figure  2  can, 
however,  be  utilized  in  a  similar  approach  for  designing  and 
evaluating  maintenance  requirements  at  all  higher  levels  of 
maintenance.  In  fact.  Figure  2  can  be  reconstructed  under  the 
Ag  term  in  Figure  2,  for  each  provisioned  spare  required  at  the 
using  level,  to  account  for  that  portion  of  Ag  coming  from  over¬ 
hauled  spares.  The  process  can  again  be  repeated  under  the  Ag 
term  reappearing  for  each  component  being  overhauled  until  all 
spares  at  the  highest  level  of  maintenance  appear  as  new  spares 
(bits  and  pieces  and  throwaway  modules).  Figure  3  shows  how  a 
new  MTR  is  established  for  each  required  spares  availability  at 
each  maintenance  level. 

The  notion  of  subsystem  availabilities  in  equation  (10)  makes  it  possi¬ 
ble  to  establish  subsystem  or  task  maintainabilities.  This  approach  pro¬ 
vides  a  useful  tool  for  combining  individual  maintenance  task  parameters 
in  arriving  at  an  overall  system  value  and  also  for  compax-ing  task  values 
to  each  other  or  to  a  mean  value  in  order  to  spotlight  those  tasks  con¬ 
tributing  least  to  desired  system  level  availability. 

The  analysis  approach  throughout  study  and  R&D  phases  should  rely 
upon  several  postulates: 

1.  Maintainability  optimization  should  be  weighted  with  correspond¬ 
ing  operational  reliability  rather  than  on  an  independent  basis. 

In  other  words,  availability  is  the  prime  consideration  to  the 
customer;  systems  should  not  be  made  maintainable  solely  for 
the  sake  of  maintainability. 

2.  All  possible  system  malfunctions  can  be  corrected  by  one  of  a 
finite  number  of  independent  maintenance  tasks. 

DEFINITION:  A  malfunction  is  any  occurrence 
where  specified  operation /outputs  are  not  present 
while  operating  within  specified  design  environ¬ 
ment  with  specified  inputs. 

3.  A  maintenance  task  is  defined  as  any  or  all  actions  taken  to 
correct  a  given  malfunction  (scheduled,  unscheduled,  marginal, 
or  catastrophic). 
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Figure  3.  Relationship  of  MTR' s  at  Various  Levels  of  Maintenance 
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4.  The  total  number  of  tasks  necessary  to  correct  any  malfunction  is 
equal  to  the  number  of  separately  identifiable  remove/replace  and 
adjustment  possibilities  required  to  correct  all  possible  failures. 
The  number  of  necessary  tasks  is  a  function  of  design  and  mainte¬ 
nance  philosophy. 

5.  A  maintenance  task  that  does  not  cause  a  system  to  be  opera¬ 
tionally  unavailable  is  considered  to  take  zero  time  duration  to 
perform.  Man-hours  expenditures  must  therefore  be  determined 
separately. 

6.  A  failure  is  not  considered  to  have  occurred  until  it  has  been 
detected.  The  probability  that  a  system  is  thought  to  be  in  com¬ 
mission,  but  is  actually  out-of-commission,  must  be  considered 
separately  from  the  maintainability  analysis. 

7.  Unavailability  due  to  malfunctions  caused  by  out-of-specification 
inputs  (vibration,  shock,  temperature,  power,  signals)  is  charged 
to  the  source  of  the  input. 

Utilizing  the  above  postulates,  all  tasks  are  predicted,  starting  at  the 
earliest  system  synthesis  phase,  by  close  coordination  with  the  preliminary 
design  team  and  design  engineers. 

The  nominal  task  availability  goal  is  determined.  A  downrate  goal  is 
then  determined  by  applying  an  operational  factor  to  the  inherent  reliability 
goal  assigned  the  hardware  associated  with  each  task.  A  maintainability 
MTR  goal  is  then  determined  for  each  task. 

Each  task  is  analyzed  from  the  hardware  viewpoint  to  determine  basic 
checkout  requirements.  A  tentative  test  procedure,  test  equipment  charac¬ 
teristics,  and  test  logic  requirements  are  determined. 

The  tentative  support  requirements  for  all  tasks  are  then  compared  to 
determine  basic  similarities  and  gross  differences.  The  results  are  next 
translated  into  a  more  detailed  interpretation  of  how  the  basic  requirements 
may  be  carried  out.  This  phase  is  necessarily  integrated  with  determina¬ 
tion  of  the  Logistics  Concept.  Operational  requirements  and  general 
customer  policies,  pertaining  to  maintenance  and  support,  are  applied  as 
constraints  that  limit  the  number  of  possible  different  solutions.  A  likely 
concept  is  determined,  based  upon  overall  cost  to  support  the  predicted 
maintenance  tasks  and  the  ability  to  meet  the  required  MTR  goal  for  each 
task  at  the  using  organizational  level. 
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I  Cost  per  task  is  estimated  and  may  be  broken  into  component  costs 

for  such  parameters  as  cost  to  keep  spares  available,  cost  to  isolate  a  mal¬ 
function,  cost  to  correct  a  malfunction,  etc.  Also,  that  portion  of  cost  that 
is  a  function  of  malfunction  rate  is  useful. 

Cost  and  time  per  task  and  other  suitable  factors  are  utilized  as  the 
basis  for  alternate  solutions  in  the  areas  of  problem  tasks.  Tasks  may  be 
eliminated  by  repackaging  or  by  changing  the  functional  concept  or  mainte¬ 
nance  concept.  Tasks  may  be  reduced  in  frequency  by  increasing  inherent 
reliability  or  by  decreasing  the  operational  multiplying  factor  that  accounts 
for  mishandling  or  misapplication  of  components  within  the  system.  Tasks 
may  be  simplified  or  carried  out  by  differing  procedures  by  adding  built-in 
test  equipment,  adding  or  relocating  test  points,  providing  isolation  circuitry, 
repackaging,  new  functional  design,  etc. 

The  preceding  steps  are  applied  with  differing  degrees  of  effort, 
depending  upon  the  stage  of  hardware  design  and  personnel  involved.  The 
ease  with  which  the  steps  are  applied  depends  also  upon  the  degree  of 
cooperation,  amount  of  quantitative  data,  and  the  analytical  tools  available 
to  the  maintainability  engineer,  and,  of  course,  his  qualifications.  The 
steps  outlined  above  are  basically  straightforward.  The  problem  lies  with 
the  tools  for  carrying  the  steps  out. 

It  is  felt  that  one  of  the  more  significant  keys  to  the  actual  analysis  of 
systems  to  determine  optimum  packaging,  necessary  test  points,  and  test 
logic  based  upon  information  outputs  from  the  system  for  every  unique  type 
of  failure,  is  the  use  of  transfer  function  techniques.  A  complete  system 
transfer  function  diagram  drawn  to  a  level  that  allows  identification  of 
finite  transfer  function  blocks  to  a  particular  removable /replaceable  pack¬ 
age  or  adjustment  is  required. 

The  starting  point  for  such  a  diagram  can  be  that  used  for  determin¬ 
ing  system  performance  characteristics.  However,  these  are  usually 
simplified  on  the  basis  that  a  component  operates  only  within  the  in¬ 
specification  range.  Many  parameters  are  considered  zero  or  negligible 
in  the  performance  analysis,  but  a  parameter  will  not  be  negligible  if  it 
"fails."  The  resulting  effect  on  the  rest  of  the  system  may  be  interesting 
from  a  maintenance  point  of  view.  Also,  in  performance  design,  cross¬ 
coupling  between  various  open  or  closed  loops  in  the  system  and  unnecessary 
but  possible  inputs  to  the  system  may  be  considered  negligible.  Such  fac¬ 
tors  may  be  extremely  important  in  troubleshooting  and  in  setting  ambient 
conditions  necessary  for  effective  troubleshooting  and  checkout. 

After  the  prime  system  is  blocked  out,  the  transfer  functions  ex¬ 
ternal  to  the  system  for  test  and  checkout  can  be  added.  The  external 
parameters  will  likely  include  human  factors  characteristics. 
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Overall  evaluation  of  such  a  system  of  transfer  functions  can  lead  to 
determination  of  minimum  parameters  that  must  be  measured  and  the 
accuracy  required  for  a  given  probability  of  isolating  a  given  faulty  trans¬ 
fer  function  to  a  remove /replace  package  or  an  adjustment.  The  best 
troubleshooting  technique  can  also  be  determined.  Completely  solving  such 
a  complicated  system  of  transfer  functions  can  be  difficult,  if  not  impracti¬ 
cal.  However,  considering  that  the  usual  case  is  where  a  system  has  but 
one  failure  at  a  time,  individual  solutions  can  be  simplified  a  great  deal. 

If  a  solution  cannot  be  made  simple,  this  is  a  clear  sign  that  the 
actual  troubleshooting  will  likely  also  be  difficult  and  special  test  procedures 
or  design  may  be  necessary. 

The  usefulness  of  the  above  approach  is  felt  to  have  only  been  touched 
on.  There  must  be  many  theorems  and  short  cuts  that  can  be  derived  for 
use  in  specific  situations.  It  remains  for  the  motivated  maintainability 
engineer  to  discover  them. 

The  other  prime  tool  utilized  a  great  deal  is  probability  and  statistical 
techniques,  including  advanced  techniques  such  as  Markov  Chain  and 
Queuing  theories  which,  in  general,  are  the  tools  of  Operations  Research. 
These  are  especially  useful  w'hen  considering  the  optimum  means  of  pro¬ 
viding  the  various  elements  of  support  at  all  maintenance  levels,  including 
spares,  test  equipment,  personnel,  facilities,  manuals,  etc.  Similar  tech¬ 
niques  are  also  required  to  relate  the  many  maintainability  characteristics, 
such  as  MTT  and  support  element  availabilities  to  the  MTR  parameter  and 
in  relating  MTR,  reliability  and  reaction  time  to  operational  availability,  and 
for  combining  submode  availabilities  to  determine  ultimate  mode  availa¬ 
bility.  There  is  room  for  many  application  techniques  to  be  developed  here 
also. 
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SUMMARC 


The  Rome  Air  Development  Center  (RADC)  has  recognized  two  hroad 
objectives  of  maintainability  programs  -  to  increase  the  availability  of 
systems/equipment  and  to  reduce  the  cost  of  operational  support  through¬ 
out  service  life.  RADC  has  strived  to  achieve  these  objectives  both 
from  a  design  viewpoint  aimed  at  determining  man-machine  relationships 
to  reduce  the  burden  on  the  maintenance  technician  and  from  a  technique 
aspect  for  a  better  understanding  of  the  problems  associated  with  the 
quantification  and  measurement  of  maintainability. 

The  successful  implementation  of  "maintainability"  in  an  equipment 
or  system  program  depends  in  large  measure  upon: 

a.  The  specification  of  definitive  maintainability  require¬ 
ments  . 

b.  The  implementation  of  proper  m£d.ntainability  design 
procedures . 

c.  The  means  for  providing  assurances  that  the  requirements 
have  been  met. 

This  paper  describes  the  approach  that  has  been  under  study  by  the 
Rome  Air  Development  Center.  The  procedure  used  to  measure  the  factors 
which  influence  design  for  maintenance  is  described.  The  specification 
of  system/equipment  requirements  and  the  demonstration  procedures  as 
reflected  in  Specification  MIL-M-26512B  are  discussed.  Validation  of 
the  demonstration  procedure  is  also  furnished. 

SECTION  I 


The  Maintainability  Technique  Study,  Contract  AF30(60?)-2057; 
initiated  by  Rome  Air  Development  Center,  has  as  its  objective  to  develop 
a  procedure  •vftiereby  the  factors  which  affect  the  maintainability  of 
electronic  equipment  can  be  identified,  measured  and  improved.  Further, 
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that  a  prediction  technique  he  formulated  that  vould  provide  the  capability 
to  quantitatively  specify,  predict,  test  and  demonstrate  the  maintaina¬ 
bility  of  new  systems  and  equipment.  In  addition,  the  technique  should 
possess  the  capability  of  being  applied  in  the  early  design  stages  of 
equipment  development  ar.d  provide  design  cycle  control  through  development 
and  production. 

To  provide  this  capability,  answers  to  the  following  questions  were 
needed: 


a.  What  are  the  factors  of  maintainability  that  affect  equip¬ 
ment  availability  and  service  life? 

b.  How  can  these  factors  be  expressed  in  quantitative  terms? 

c.  How  does  the  support  environment  including  maintenance 
personnel,  spares,  test  equipment  and  facilities  affect  maintainability? 

d.  What  is  the  relationship  of  equipment  design  to'  main¬ 
tainability? 

To  provide  a  systematic  approach  to  the  program,  five  formal  phases 
were  established.  These  phases  include:  (l)  development  of  a  research 
planj  (2)  data  collection;  (3)  data  reduction;  {k)  development  of  the 
prediction  method;  and  (5)  trial  application  and  validation. 

The  design  of  the  research  plan,  Phase  I,  consisted  of  a  statement 
of  the  hypothesis  and  an  exploration  of  the  factors  believed  to  affect 
maintainability.  Measurement  techniques  and  techniques  of  analysis 
leading  to  the  development  of  a  prediction  methodology  were  developed. 

The  fundaments],  hypothesis  established  eaxly  in  the  study  program 
was  that  maintenance  time  is  a  function  of  three  (3)  major  parameters, 
design,  personnel  and  support.  Each  contributes  to  the  maintenance  time 
required  to  restore  an  equipment  to  satisfactory  operating  condition. 
Therefore,  the  technique  developed  must  be  capable  of  relating  these 
parameters  to  a  common  denominator. 

After  reviewing  the  requirements  for  a  prediction  technique,  it  was 
felt  that  the  most  suitable  denominator  to  which  the  parameters  could  be 
reduced  and  a  quantitative  maintainability  figure  expressed,  was  time. 
Two  reasons  for  this  choice  are: 

1.  Time  is  universality  meaningful  and  expresses  the  various 
aspects  of  maintenance  understood  by  both  operational  and  development 
agencies  and  is  a  meas\irable  quantity. 
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2.  Time  ie  s  trtie  meMure  of  the  influence  of  meinteinehilitgr 
on  <q^retional  ea^ehili-ty. 

Fbeee  II,  the  date  collection  program,  provided  the  rev  material  from 
vhich  the  required  relationship  could  he  derived.  Since  no  means  existed 
for  measuring  the  paraaasters  of  deslffx,  personnel  end  siqpport,  it  ims 
necessary  to  devise  a  system  for  determining  their  magnitude. 

Maintenance  task  Mrfomsnce  vas  recorded  for  three  ground  electroxiie 
eq^liaients  at  eight  (8)  operational  field  sites  and  under  controlled 
conditions  at  three  additional  locations.  Nalntanance  task  time  data  vas 
collected  and  the  tine  reqjulrenents  for  the  performance  of  each  of  el£^ 

(8)  laajor  elements  of  maintenance  task  eas  recorded  to  the  nearest  tenth 
of  a  minute.  These  elenents  included:  (l)  asasnible  and  disaasssible;  (2) 
test  and  measurement;  (3)  remove  and  replace;  (^)  checkout;  ($)  clean  aM 
lubricate;  (6)  secure  materials;  (7)  prepare  reports;  and  (8;  contingency 
items.  Additional  data  was  obtained  by  means  of  checklists  which  related 
the  influence  of  Inherent  design,  personnel  reqjulcements  and  logistic 
support  on  the  ease  of  performing  maintenance.  Since  the  elements  of 
maintainability  vary  for  each  maintenance  task,  it  was  necessary  to  score 
the  checklists  for  each  maintenance  task.  The  score  for  each  quMtlon 
could  vary  from  0  to  4  depexvling  upon  the  condition  of  the  characteristic 
being  measured.  The  sun  of  the  individual  scores,  when  observed  over  a 
number  of  tasks,  provided  a  meaningful  total  of  the  influence  of  the 
characteristic  in  qjaestion  on  maintmaence  time. 

A  comprehensive  processing  of  the  field  data  vas  accomplished  in 
Phase  III.  All  data  was  screened  for  coopleteness,  clarity  and 
sumnarlsed  with  reepect  to  eqjulpment  task  measurements.  Means,  variance, 
distributions  and  overall  eqiulpment  rellsbili-^  were  determined.  The 
distribution  of  the  checklist  scores  was  found  to  be  normally  distri¬ 
buted.  Maintenance  time,  however,  was  distributed  log  normally;  hence, 
a  log  transformation  was  used  to  determine  if  the  transformed  data  would 
fit  a  normal  distribution  pattern.  A  test  for  goodness  of  fit  (Komolgorov- 
Staiimov  Test)  of  the  log  maintenance  data  was  performed  to  determine  if 
the  real  distribution  was  log  normal.  The  results  of  the  test  verified 
that  log  technician  time  forms  a  normal  distribution. 

The  prediction  technique  was  developed  during  Phase  IV.  The  use  of 
a  prediction  technique  during  the  design  phase  of  a  new  equipment 
considers  primarily  the  design  parameter.  This  dictated  the  development 
of  an  expression  relating  malntenazure  design  criteria  to  time  require¬ 
ments.  Using  regression  analysis  techniques,  a  downtime  equation  was 
developed  relating  erqpected  dowtlme  to  checklist  scores  fbr  physical 
design  features,  design  as  it  relates  to  fecllitles  and  desipu  as  it 
relates  to  malntensnee  skills.  To  facilitate  the  interpretation  of  the 
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checklists  scores  into  malQtenajice  dovatlme;  a  nomograph  vels  developed 
embodying  the  dovntime  equation  vhich  is  eaqpressed  as  log  *  3*5^651  - 
0.02?12A  -  O.03055B  -  0.01093c.  Use  of  the  nomograph  involves  the  plotting 
of  the  checklist  scores  for  A,  B  and  C  on  the  nomograph  and  reading  the 
expected  downtime  for  a  particular  maintenance  task.  Repeated  application 
of  this  procedure  for  a  number  of  tasks  provides  the  means  for  predicting 
the  mean  and  maximxim  downtime  for  the  system  or  equipment. 

The  application  of  the  prediction  technique  to  evaluiate  an  equipment’s 
maintainability  is  approached  from  a  sampling  basis.  There  are  five  (5) 
distinct  steps  in  the  application  of  the  technique. 

1.  Determination  of  sample  size. 

2.  Selection  of  tasks. 

3.  Perfoimsnce  of  a  maintainability  analysis. 

ij-.  Scoring  of  the  checklists. 

5.  Prediction  of  downtime. 


The  sample  size  to  be  used  is  dependent  upon  the  statistical  accuracy 
and  confidence  level  desired.  The  sar^ile  size  "N"  is  determined  from  the 
relationship  H  =  (0  c)'~  where  0  is  the  confidence  level,  k  is  the  accuracy 
(k  X) 

and  a  is  the  ratio  of  the  variance  to  the  mean  of  the  population.  From 

T 


the  observed  field  data  the  ratio  of  a  for  the  log  data  was  fovind  to  be 

X 

.284  (1.07  real  time).  For  a  confidence  level  of  905^  =  1.64,  (a)=  .284  and 

, 

an  accuracy  of  +5?i  a  sample  size  of  90  would  be  required. 


The  parts  to  be  used  for  simulated  maintenance  tasks  are  selected  on 
the  basis  of  average  failure  rates  for  each  part  class,  the  number  of  parts 
of  each  part  class  and  the  part  contribution  to  downtime.  The  nuimber  of 
parts  per  part  class  is  multiplied  by  the  average  failure  rate  per  1000 
hoiirs  to  determine  the  expected  number  of  failures  per  1000  hours  of  equip¬ 
ment  operation.  The  percent  contribution  of  each  part  class  to  the  total 
expected  failures  is  then  computed  and  the  number  of  esich  type  of  failure 
for  the  pre-determlned  Eanq)le  size  is  established.  The  specific  parts  to 
be  selected  are  determined  with  the  aid  of  the  equipment  part  list  and  a 
table  of  random  numbers. 


A  maintainability  analysis  is  performed  for  each  part  selected  for  the 
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evaluation.  At  the  present  time,  the  peurt  is  assumed  to  have  failed  in 
its  most  common  failure  mode.  Starting  with  the  system  meO-functlon,  a 
logical  diagnostic  procedure  is  followed  to  isolate  the  defective  part. 
With  each  step,  notations  are  made  regarding  access  prohlems,  test 
equipment  requirement,  and  other  information  Important  in  performing  the 
maintenance  task. 

The  completion  of  the  maintainahllity  analysis  forms  the  "basis  for 
completing  the  checklists.  The  checklist  scores  provide  an  overall  view 
of  the  design  of  the  equipment  from  the  standpoint  of  maintainahllity. 

As  described  previously,  the  scores  from  the  checklists  are  then 
applied  to  the  downtime  nomograph  and  the  predicted  downtime  for  the 
specific  task  is  determined.  The  mean  (Mg^)  and  maximum  (l-^nax) 
calculated  from  the  equations. 

^t  =  _ Mfii 

N 

log  IVax  “  log  ^t  1*^5 


where  *  the  corrective  maintenance  time  per  task 
N  =  the  number  of  simulated  maintenance  tasks 

The  validity  of  this  technique  is  presently  being  tested.  The  tech¬ 
nique  was  used  to  predict  downtime  of  two  equipments.  Maintenance 
time  data  was  recorded  at  operational  field  sites  for  the  same  equipment. 
Preliminarj’’  analysis  cl'  tne  dsxa  indicapes  nnat  the  maximum  difference 
between  predicted  and  observ-;d  values  for  was  20^. 

The  technique  which  has  been  developed  is  reflected  in  Appendix  A  of 
^ecification  MIL-M-26512B .  Equations  for  the  mean  and  maximum  do'wntime 
e:.?pressed  in  paragraph  30.3.1  of  the  specification  establish  the  goals  to 
be  achieved.  Task  selectivcn  is  described  in  Section  hO.  The  only 
significant  difference  between  the  procedures  described  by  the  specifica¬ 
tion  and  that  developed  under  the  contract  lies  in  the  selection  of  the 
niimber  of  simuiatea  maintenance  tasks.  Table  1,  Appendix  A,  as  it  is 
formulated,  restricts  the  number  of  simulated  tasks  to  a  mininmm  of  52.  A 
more  rigid  determination  of  sample  size  would  employ  the  eqioatiion  previ¬ 
ously  described  with  the  associated  confidence  level  and  accuracy.  Table  1 
can  be  used  to  select  maintenance  tasks  during  the  maintainability  predic¬ 
tion  phase.  The  same  tasks  can  be  used  during  the  demonstration  phase 


H  N  o 

^2.  Mct)^  -  (  log  Mct)^ 

— u - 

__ 
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'vAiere  the  actiial  maintenance  times  are  recorded.  The  actual  maintenance 
time  Is  used  In  the  "verification"  equations  described  in  paragraph  40.1.4 
of  the  Appendix.  Coiiq>arlson  of  the  actual  M  and  %ax  those  established 
as  the  goals  within  the  stated  confidence  levels  deteimlnes  con^llance 
or  non-coiiS)llance  with  the  maintainability  requirements. 

Although  the  major  objective  of  IMs  study  was  to  develop  a  predic¬ 
tion  technique,  other  relationships  were  developed  which  are  of  interest. 
Mean  downtime  for  preventive  maintenance  approximated  from  the 

relationship  assumes  that  the  mean  corrective  maintenance 

time  (Mq^)  Is  known.  A  more  accvirate  estimate  can  be  obtained  by  applying 
the  prediction  technique  to  a  group  of  r^resentative  preventive  mainten¬ 
ance  tasks.  Another  useful  relationship  was  developed  relating  maintenance 
time  data  obtained  from  field  sites  in  the  actual  operating  environment 
and  similar  data  obtained  in  a  "laboratory"  controlled  environment.  This 
relationship  is  expressed  as  relationship  can  be 

very  useful  in  expediting  maintainability  testing  by  allowing  some  tests 
to  be  performed  at  the  plant  and  account  for  degradation  caused  by  the 
field  maintenance  environment.  Caution  should  be  exercised  in  the  use  of 
these  relationships  since  it  is  felt  that  additional  data  and  validation 
Is  required. 

The  prediction  technique  as  it  is  presently  formulated  requires 
refinement.  BADC  has  initiated  a  program  to  increase  the  quantity  and 
quality  of  maintenance  task  time  data  particularly  at  the  part  and  circuit 
level  with  particular  emphasis  on  the  Influence  of  variation  in  circuit 
design  on  maintainability.  It  is  anticipated  that  this  effort  will 
increase  the  confidence  in  the  prediction  technique  and  its  accuracy  in  the 
early  design  stages  of  equipment  development. 

SECTXOM  II 


The  use  of  the  prediction  technique  discussed  is  dependent  on  sampling 
procedures  in  conjunction  with  transformations,  regression  analysis  and 
figures  of  tolerance  and  confidence.  Basically  the  mathematical  funda¬ 
mentals  of  the  prediction  exercise  are  as  follows: 

1.  Selection  of  sanple  size. 

2.  Application  of  regression  analysis. 

3.  Calculation  of  maintenance  indices. 

Both  laboratory  and  field  data  indicate  that  downtimes  for  any  given 
electronic  equipment  are  distributed  log  normally  (see  Figure  l).  Since 
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It  is  difficult  to  fully  and  simply  analyze  and  examine  all  the  character¬ 
istics  of  this  distribution  In  its  raw  shape,  a  transformation  of  one  of 
Its  variables  Is  necessary  to  re^uci^  It  to  more  tractable  form. 

Let  the  new  variables  be  U  and  V,  where  U  ■  Y  and  V  ■  logioX. 
vhere  Y  ■  frequency  of  occurrence  of  a  value  of  downtime 
X  »  the  value  of  downtime 

The  distribution  of  Figure  I  is  then  transformed  to  the  distribution 
of  Figure  II  (a  normal  distribution)  which  lends  itself  to  examination  and 
analysis  more  readily.  Figure  II  is  then  a  log  normal  representation  or 
more  simply  the  distribution  of  the  '  logarithms  of  downtime. 

Let  us  assume  that  this  distribution  is  representative  of  a  universe 
of  the  log  of  downtimes  for  any  given  equipment.  Take  H  samples  from 
this  xmiverse,  each  cf  size  N  and  compute  the  mean  of  each  sample.  It  will 
be  found  that  the  ireans  of  the  H  samples  are  normally  distributed  with 
standard  deviation  Ox  and  a  mean:  of  sample  means  of  loctj^-f 

°x.  =  ^logjfct 

vrtiere  =  the  standard  deviation  of  the  universe  of  log  downtime 

N  =  the  number  of  items  in  a  sample. 


Since  we  are  dealing  with  normalized  quantities,  a  statistical  area 
of  spread  may  be  defined  for  the  true  mean  of  a  normal  universe. 

*p 

Let  us  see  what  this  means.  If  we  took  maiiy,  many  samples  of  down¬ 
times,  each  of  size  H,  the  mean  of  each  sanrple  would  not  be  the  same.  Some 
means  would  be  larger  than  others,  but  percentages  of  all  means  can  be 
located  with  respect  to  the  mean  of  the  universe  with  aid  of  the  standard 
deviation  Ox  and  the  concept  of  normality.  For  example,  about  2/3  of  all 
means  would  be  within  one  standard  deviation  (a^^)  of  the  universe  mean,  and 
93i>  of  the  sample  means  would  be  within  2  standard  deviations  (2  Ox)  of  the 
universe  meanr 

In  our  sample  of  N  log  downtimes  we  find  a  mean  of 


■•*1  -  For  extension  of  the  above  concept  see  Hald  "Statlsticed  Theory  with 
Engineering  Applications",  Chapter  8. 

*2  -  See  Waugh,  "Elements  of  Statistical  Method",  Chapter  9. 
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vhere 

N 

We  do  not  know  that  this  Is  the  mean  log  downtime  of  our  universe  of  log 
downtimes;  other  sauries  would  give  other  means.  But  In  our  etssumgptlons,  we 
know  that  two-thirds  of  all  these  other  means  will  be  within  Ov  of  the  mean 
of  the  universe  of  log  downtimes.  It  Is  therefore  true  that  the  chances  are 
2  out  of  3  that  this  mean  (log^i^j^)  la  within  0^  of  the  mean  of  the  imiverse 
of  downtimes.  Conversely  It  Is  true  that  the  chances  are  2  out  of  3  that 
this  mean  of  the  universe  Is  within  Oy  of  the  means  of  this  saii^)le.  Since 
then  the  mean  of  the  sample  Is  log,  the  chances  are  2  out  of  3  that  the 
mean  of  the  universe  logjuf^^  is  within  of  or 

Hence  the  true  mean  of  the  universe  may  be  defined  by  a  spread  of  standard 
deviations  about  the  sait^le  mean.  In  general 

loi^  +  0  Ojj  (2) 

where  0  ■  the  confidence  to  be  applied  to  the  estimate >  0*1  for  2/3 
confidence,  0*2  for  19/20  confidence. 

It  is  possible  to  represent 


0  Ox  =  k 


wliere 


or  _ 

rN 


k  -  ib  derined  as  a  parameter  of  accuracy  or  spread  with 
respect  to  the  mean 


Hence 


N 


(|_)|  (  O  logMct) 


(■ 


2 

)2 


(3) 


where  N  -  Is  the  number  of  san^les  necessaiy  to  the  prediction 
exercise 

Observed  field  data  provides  a  basis  for  determining  the  sample  size  needed 
for  a  t^ical  problem  since  oi6ta<  '?t.  hsw  been  found  to  be  ■  .284 
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N-(JL)^  (.284)2  (4) 

(  k  )2 

Therefore  merely  by  etlpulatlng  the  spread  parameters  ^  (the  confldeoce  to 
he  applied  to  the  spread)  and  k  (the  proportion  of  spreadjj^h  respect  to 
the  mean),  the  sanqple  size  necessaxy  for  prediction  of  (mean  log 

dowitlme)  may  he  calculated.  (The  above  mlj^t  he  restated  -  to  detenoine 
the  sample  size  vhlch  vlll  permit  stating  the  mean  with  an  acc\iracy  of  k 
(lOO)  percent  vith  a  coxifldence  stipulated  by  ^.) 

It  should  he  noted  that  the  above  (equation  4)  sets  the  accuracy  and 
confidence  levels  for  the  prediction  of 

Although  equation  (3)  (the  calculation  of  sample  size)  wets  derived  on 
the  basis  of  a  log  noniial  representation,  it  is  sufficiently  non-peurame- 
tric  in  nature  to  be  applied  generally  to  any  practical  distribution  (for 
relatively  large  values  of  N  vhere  N  «  H)  such  that 


vhere  a  *  standard  deviation  of  the  distribution 
X  -  distribution  mean 

Observed  field  data  provides  a  basis  for  deteiminlng  the  sample  size 
to  detemlne  Mg-b  (mean  dovntlme)  for  a  typiced  problem  since  g  of  untrans- 
foxmed  dowtlme  data  has  been  foxind  to  be  >  1.07.  ^ 

Hence 


N  =  ijjl  (1.07)2  (6) 

(  k  )2 

Therefore  the  accuracy  and  confidence  of  Met  are  also  set  by  the  sample 
size. 


After  determining  the  proper  numiber  of  samples  the  prediction  is 
implemented  as  in  Section  I  and  the  regression  equation 

Z  -  loeM  4.  -  3.54651  -  .025124  -  .03055B  -  .01093C 

(7) 

is  evaluated  for  each  sample  task  (a  simulated  failure).  Checklists  A, 

B  and  C  provide  the  values  necessauy  for  computation  of  A  nomogreph 

(see  Figure  IIIO  presents  the  regression  equation  in  a  convenient  form 
and 
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(8) 


I 

1 


ct 


defines  the  figure  of  mean  dovntlme. 

The  prediction  of  equipment  maintainability  must  also  Include  the 
determination  of  the  95th  percentile  (that  value  below  lAiich  95^  of  the  all 
downtimes  lie).  In  order  to  define  this  characteristic  most  fully,  let  us 
consider  a  normal  representation.  Define  the  mean  of  the  log  normal  repre¬ 
sentation  as  M  (log  x)  B  log  €.  €  does  not  denote  the  mean  of  the  vGoriable 

x^hence  merely  taking  the  antilog  of  the  mean  of  a  log  normal  representation 
will  not  yield  the  mean  of  the  variable.  The  mean  of  x  (x)  may  be  denoted 
as 

X  =  antilog  (log  €  +  1. 15130^)  (see  Hald's  (9) 
(Statistical  Theory  with  Engineering  Applications  for  proof) 

The  median  of  x  (x^)  may  however  be  found  by  taking  the  antilog  of 
the  mean  of  the  log  normal  r^resentatlon. 

x^  =  antilog  (log  6)  »  x^  »  € 

Reference  is  made  to  Figure  IV.  The  figure  shows  a  histogram  of  a 
normally  distributed  representation  of  log  x  values.  Utilizing  the  concept 
of  normality  that  of  all  elements  belong  to  the  interval  (log  €  - 

1.96(T<  log  X  <  log  €)  and  to  the  interval  (log  €<  log  x  <  log  €  + 

1.960)  ■where  0  is  the  standard  deviation  of  the  log  normal  r^resentation. 
(note  both  intervals  are  same  ■width). 

If  this  distribution  is  transformed  (Figure  V)  from  a  log  representa¬ 
tion  "tx)  its  original  form,  and  if  the  corresponding  elements  are  considered, 
the  t'WD  Intervals  still  holding  each  47.$^  of  the  elements  are  modified  ■!» 

(  €  <  X  <  €)  and  (€  <  x  <  6  (1  +  a)  ) 

(1+a  ) 

where  10^’ 98®  =  1  +  a 

If  o  is  relatively  large  the  size  of  the  two  intervals  differ 
markedly  (i.e.,  of  the  population  are  squeezed  together  in  a  small 

interval  to  the  left  of  the  median  and  another  h'J.'yi)  of  the  population  are 
scattered  over  a  comparatively  large  interval  ■to  the  right  ot  the  median). 

It  is  these  characteristics  along  wtdch  allow  the  95th  percentile  to  be 
calculated  as 
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o 


o 


-  antilog  (lo^^  +  1.6k^  ^ 


(11) 


vhere 


^log  €  =  lOi 
log  X  =  lo, 
a  (log  x) 


log, 


N 

H 


N 


N 


(12) 

(13) 


The  prohahility  that  -yrtien  maintenance  action  is  taken  because  of  equip¬ 
ment  failure,  the  system  will  be  restored  to  a  satisfactory  operating  condi¬ 
tion  in  a  given  period  of  time  may  be  given  as 


where  |i  =  log  Met  •*  log 

The  probability  Pj,  may  be  determined  also  from  tables  of  the  cumulative 
normal  distribution  available  in  most  handbooks  of  tables. 

Maintainability  is  demonstrated  in  a  manner  similar  to  its  prediction. 

1.  A  sample  number  is  chosen  consistent  with  the  required  accurew:y 
and  confidence,  (this  number,  however,  must  be  at  least  50),  utilizing 
equations  (3)  or  (5). 

2.  Appropriate  tasks  (N)  (simulated  failures)  are  chosen  in  the 
same  manner  as  was  done  during  the  phase  of  prediction. 

3*  The  downtime  associated  with  each  task  is  measured  and  a  mean 
downtime  for  all  H  is  calculated. 

4.  Values  of  log  calculated  from  the  data. 

5.  Equations  are  utilized  to  determined  the  measured 
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SUMMARY: 


This  paper  describes  a  general  analytic  model  that  has  been  developed  for  use 
in  support  systems  analysis.  The  paper  outlines  the  basic  logic  of  this  model,  and 
describes  the  application  of  the  model  to  the  problem  of  selectir:  in  optimum 
support  system. 
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INTRODUCTION: 


The  design  of  a  support  system  for  the  maintenance  of  large-scale  electronic 
systems  should  be  approached  in  the  same  systematic  manner  used  in  designing  the 
hardware  system  itself.  Unfortunately,  the  engineering  decisions  on  a  given  sup¬ 
port  system  design  are  often  made  by  several  individuals  or  groups  without  consid¬ 
ering  the  numerous  interrelating  effects.  Spare  parts  are  sometimes  selected  by 
use-quantity  without  considering  reliability  failure  rates  or  the  detailed  maintenance 
concept.  Ilie  maintenance  concept  is  sometimes  established  on  the  basis  of  speed 
or  tailored  to  fit  into  a  given  system,  without  regard  to  spare  parts  cost  or  system 
over-all  availability.  The  omission  of  such  considerations  in  the  selection  of  a 
given  support  system  element  is  not  deliberate.  The  problem  arises  from  lack  of 
emphasis  on  early  planning  by  an  engineering  group  designing  the  over-all  support 
system  and  establishing  trade-offs  among  the  many  parameters  that  must  be 
considered. 

The  purpose  of  this  paper  is  to  enumerate  some  of  the  many  considerations  in¬ 
volved  in  a  typical  support  system  design  and  to  develop  analytical  models  which 
may  be  used  for  actually  determining  the  trade-offs  required  by  the  typical  system 
described.  By  postulating  different  support  configurations,  and  determining  the  net 
effectiveness  of  each,  it  is  then  possible  to  compare  the  configurations  and  make  a 
selection  based  on  the  desired  criterion. 

SUPPORT  SYSTEM  DESIGN  CONSIDERATIONS: 


Let  us  begin  by  describing  the  type  of  system  we  have  in  mind  for  this  typical 
analysis.  The  system  could  be  a  large  ground  electronics  network  for  communica¬ 
tions,  missile  guidance,  detection,  etc. ,  and  would  cover  a  continental  area.  It 
would  consist  of  many  sites,  either  manned  or  unmanned;  and  the  sites  might  be 
interrelated.  With  a  general  description  such  as  this,  the  model  will,  of  course,  be 
general  in  nature  and  will  become  specific  to  a  given  system  by  virtue  of  the 


numbers  placed  on  the  various  Interacting  parameters . 

The  next  question,  then,  is  what  are  the  parameters  being  considered?  For  this 
area,  it  is  convenient  to  divide  the  analysis  into  two  categories:  Maintenance  Avail¬ 
ability  and  Supply  Availability. 


Maintenance  Availability  covers  the  following  areas:  (1)  equipment  performance 
from  a  reliability  standpoint,  (2)  the  time  periods  between  either  automatic  or  man¬ 
ual  tests ,  (3)  the  time  required  for  repair  crew  travel  upon  detection  of  a  failure , 

(4)  the  time  required  to  locate  the  cause  of  failure  and  to  repair,  (5)  the  time  re¬ 
quired  to  obtain  the  necessary  spare  parts  after  identification  of  the  failed  replace- 
sJjle  item,  and  (6)  the  efficiency  of  each  equipment  test  (namely,  the  probability  of 
the  test  detecting  a  failure) . 

The  maintenance  availability  factor,  by  itself,  makes  the  assumption  that  the 
replacement  unit  to  repair  the  system  is  actually  available  for  use  at  the  time  of  the 
detected  failure.  The  factor  of  transportation  to  acquire  this  available  unit  is, 
however ,  included  in  the  maintenance  availability  areas  as  mentioned  above .  The 
assumption  of  immediate  availability  of  spare  replacement  items  can,  of  course,  be 
made  with  an  unlimited  quantity  of  spare  units.  The  magnitude  of  the  "unlimited"  is 
dependent  upon  the  over-all  system  size  and  complexity.  Such  a  situation  is  nor¬ 
mally  prohibitive  from  a  cost  standpoint  and  consequently  a  second  grouping  of  items 
to  be  considered  in  the  Support  System  Analysis  is  Supply  Availability. 

The  Supply  Availability  considers  such  items  as:  (1)  the  number  of  spare 
modules  for  the  complete  system,  (2)  the  number  of  repair  benches  to  maintain  these 
spare  modules  in  working  order,  (3)  the  number  of  repairmen  and  the  amount  of  time 
required  to  find  and  repair  the  malfunctioning  component  part  in  the  spare  module , 

(4)  the  number  of  items  per  unit  time  anticipated  at  the  repair  point,  (5)  the  trans¬ 
portation  time  from  the  point  of  failure  to  the  repair  facility,  and  then  back  to  the 
operable  module  storage  area,  (6)  the  time  required,  if  any,  awaiting  replacement 
parts,  and  (7)  the  scheduled  working  periods  of  repairmen  -  for  example,  it  may  be 
desirable  to  have  only  a  single  shift  with  provisions  for  emergencies. 

No  doubt  there  are  other  considerations  for  both  maintenance  and  supply  avail¬ 
ability,  and  these  could  be  included  in  a  similar  analysis  if  the  particular  system  in 
question  possessed  these  additional  considerations  as  significant  parameters. 

In  designing  an  over  -all  support  system,  both  maintenance  availability  and  sup¬ 
ply  availability  must  be  treated.  The  over-all  support  system  availability  may  be 
stressed  as  the  product  of  the  supply  and  maintenance  availabilities  -  i.e. , 


Eq.  (1) 
where 


Aj^  =  Maintenance  Availability 
Ag  -  Supply  Availability 
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MAINTENANCE  AVAILABILITY: 


Ground  military  electronic  systems  generally  have  the  characteristic  that 
some  failures  can  be  tolerated  if  their  occurrence  is  not  too  frequent  and  if  the 
resultant  downtime,  is  not  too  long.  Failure  repair  to  the  piece-part  level  usually 
involves  long  time  periods  for  both  the  location  and  actual  change  of  the  failed  item. 
This  would  result  in  excessive  system  downtime  if  replacement  of  the  failed  part 
were  required  to  return  the  system  to  operation.  As  excessive  downtime  is  unac¬ 
ceptable,  the  maintenance  concept  with  respect  to  returning  the  system  to  satisfac¬ 
tory  operation  is  that  of  module  replacement,  where  the  module  is  of  the  plug-in 
printed-wire  board  type.  Wlien  a  failure  is  detected  at  a  site,  it  is  localized  to  a 
module  that  is  then  removed  and  replaced  with  a  spare.  There  may  be  many 
modules  of  a  given  type  at  a  given  site  and  modules  of  the  same  type  are  inter¬ 
changeable.  Modules  are  considered  as  being  of  the  same  type  even  though  an 
electrical  parameter  adjustment  may  be  necessary.  There  are  many  types  of 
modules  in  a  given  site.  It  is  recognized,  that  keeping  the  number  of  module  types 
as  low  as  possible  will  have  a  significant  effect  on  the  over-all  support  system 
problem.  This  is  an  equipment  design  problem ,  however,  and  is  not  treated 
directly  in  this  support  system  analysis.  The  model  can  be  utilized  to  show  the 
effect  of  reducing  the  number  of  modules  by  changing  this  normally  fixed  parameter 
in  the  support  system  analysis. 

Two  types  of  tests  are  postulated  for  determining  whether  or  not  the  site  has 
failed.  Test  1  is  a  periodic,  comprehensive  test  which  detects  any  failure  in  the 
site;  that  is,  the  efficiency  of  Test  1  with  respect  to  detecting  a  failure  is  unity. 
Normally,  Test  1  would  be  manually  initiated  and  monitored.  Test  2  is  a 
continuously- monitoring  test  which  detects  a  fraction  of  the  site  failure  -  its 
efficiency  is  usually  less  than  unity.  Through  the  efficiency  value  in  the  analytical 
mode,  either  test  may  be  considered  to  be  the  only  test,  or  any  mix  may  be 
postulated. 

In  the  determination  of  maintenance  availability,  it  has  been  assumed  that  the 
maintenance  personnel  who  perform  the  periodic  Test  1  do  not  service  the  failures 
detected  by  Test  2.  It  is  further  assumed  that  when  a  failure  is  detected  by  the 
continuous  test,  Test  2,  a  repairman  is  available  to  begin  the  service.  These 
assumptions  have  been  made  for  analytical  convenience  and  the  consequences  of 
their  denial  should  be  investigated.  This  investigation  is  beyond  the  intended  scope 
of  this  paper. 
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The  availability  associated  with  Test  1  is  considered  first.  In  this  instance, 
the  downtime  associated  with  a  failure  detected  by  Test  1  contains  the  following  ele¬ 
ments: 


(1)  A  calculated  time  period  during  which  a  failure  existed  but  was  not 
detected  (and  here  consideration  is  given  to  the  efficiency  of  Test  2) 

(2)  The  time  to  detect,  remove  all  failed  modules,  and  obtain 
replacement  modules. 

The  equations  derived  assume  that  the  site  is  operational  during  the  time  period 
required  to  perform  the  test  itself  if  failures  do  not  exist.  In  the  event  that  the 
equipment  must  be  taken  out  of  operation  to  perform  Test  1,  then  the  time  to  perform 
the  test  may  be  added  directly. 

The  total  site  failure  rate  is  x.  ^nd  X.  ^  is  defined  as  that  portion  of  the  total 
site  failures  which  is  not  detected  by  the  continuous  Test  2  or: 

Eq.  2  (1  -  Pg)  ^  where 


Pg  =  the  efficiency  of  Test  2  in  failure  detection. 


The  average  downtime  per  Test  1  cycle  E  (+q)  may  be  expressed  as: 


Eq.  3 


E  (+jj)  =  +  1)  tj^  + 


where 


R.  =  average  replacement  time  of  a  module  including  fault  localization, 
removal  and  replacement  by  a  spare  module 

=  scheduled  period  of  time  between  the  periodic  Test  1 


T,  =  downtime  caused  by  transportation  when  replacing  a  failure  discovered 
by  Te«  1 


E  =  Base  of  Naperian  Log 


Eq.  3  is  derived  in  the  appendix. 


The  transportation  time  (TJ  takes  on  special  values  with  different  maintenance 
concept  supply  configurations,  ^or  example: 

(a)  If  spare  modules  are  located  at  the  site  itself  or  are  carried  there 
by  a  crew  performing  Test  1,  then  T^  =  0. 

(b)  If  spare  modules  are  located  at  a  remote  supply  point,  but  can  be 
sent  in  answer  to  a  call,  then  Tj^  =  T^  where  T^  is  the  travel  time  from  the  stpply 
point  to  the  site. 

(c)  If  spare  modules  are  located  at  a  central  supply  point  but  communi¬ 
cations  are  not  available,  then  T,  =  2T. . 

1  4 
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The  transportation  time  can  also  be  used  to  incorporate  delays  other  than 
obtaining  spares.  If  the  results  of  Test  1  are  remotely  indicated,  T^  should  also 
include  the  ’^travel  delay  time  (T„)  of  the  repairman  to  the  site.  In  the  instance 
where  performance  of  Test  1  removes  the  equipment  from  operational  status,  the 
total  test  time  Tg  would  be  added  to  the  expression  for  (+jj)  (equation  3. ) 

The  average  uptime  of  the  complete  Test  1  cycle  as  derived  in  the  appendix  is: 

Eq.  4  E,  (+  )  =-^  (1  -  ^  when  the  equipment  is 

^  \ 

operational  during  the  test  itself. 

The  site  availability  with  respect  to  Test  1  is  and  may  be  e3q)ressed  as; 

E  ^  "f"  ^ 

Eq.  5  A,  =__Mr _  where 

equations  (2),  (3),  and  (4)  give  the  required  substitutions. 

Test  2  would  be  an  automatic  type  of  test  by  either  a  remote  or  on-site  control 
device.  The  indication  of  a  fault  is  displayed  at  a  maimed  station  where  immediate 
action  can  be  initiated.  The  typical  Test  2  is  performed  while  the  equipment  is 
fully  operational  and  does  not  possess  unity  efficiency  in  failure  detection.  (  X. 
is  defined  as  that  portion  of  the  total  site  failure  which  will  be  detected  by  Test  ^ 

2. 


Eq.  6  X2  =  ^2^ 


The  downtimes  associated  with  Test  2  are  as  follows: 

(1)  The  travel  time  of  a  repairman  from  home  base  to  the  site,  (Tg) 

(2)  The  time  to  localize,  remove,  and  replace  the  failed  module 
and  the  time  to  obtain  the  replacement  module,  (Rg) 

(3)  The  time  to  obtain  the  necessary  replacement  spare  modules.  (Tg) 

(4)  The  average  downtime  per  failure  detected  by  Test  2  is: 


Eq.  7  £^(*0)  =  R2  -  t  T, 


The  average  uptime  may  be  expressed  as: 

Eq.  8  E  (+  )  =  _i_ 

^2 

The  site  availability  with  respect  to  Test  2  then  is: 

Eq.  9  .  ^  ^2^V _ 

2  E2(+y)  +  E2(+jj) 


*  communication  and  administrative  delay  included. 
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Eq.  10 


1 


1  + 

As  previously  mentioned,  the  situation  of  the  repairman  not  being  at  home  base 
has  not  been  considered. 

The  over-all  maintenance  availability  of  the  site  is  given  as: 

Eq.  11  ^2 


A  major  factor  affecting  the  Maintenance  Availability  is  the  number  of  main¬ 
tenance  teams  required  for  Test  2  and  repair  teams  for  Test  1.  For  convenience 
the  two  teams  for  Test  1  and  Test  2  are  treated  as  independent,  and  the  demand  for 
service  by  these  teams  is  assumed  to  be  non-conflicting. 


Let:  =  number  of  teams  required  to  perform  Test  1  for  all  sites. 


An  expression  for  is  straightforward  with  the  assumption  of  independence 
between  the  teams,  and  may  be  expressed  as: 


Eq.  12 


where 


V  =  total  number  of  sites  in  the  system. 

i  =  mean  number  of  site  tests  <Test  1  )  performed  by  a  team  in  a  unit  period 
of  time  and  is  a  function  of  the  travel  time  between  sites,  the  duty  cycle  of  the 
test  team,  as  well  as  the  actual  time  to  perform  each  test  and  replace  any 
detected  failures . 

An  additional  complicating  factor  must  be  included  in  ^  when  spare  parts  for 
replacing  failed  modules  are  not  immediately  available.  For  the  calculations  in 
this  paper,  aosumpticnG  have  been  made  for  values  of  ^  .  More  detailed 
expressions  are  necessary  and  should  be  pursued  in  future  work. 

N„  =  number  of  "line"  repair  teams  per  support  area  required  to  implement 
Test  T. 


The  estimation  of  Ng  is  more  tenuous  because  of  the  waiting-line  situation 
arising  from  the  rundown  distribution  of  equipment  failures.  The  estimate  has 
been  made  using  a  25%  utilization  factor  for  the  repair  teams.  The  estimate  of 
manning  requirements  on  this  basis  for  Test  2  is  that  N2  =  the  smallest  integer 
such  that: 

Eq.  13  4  \2h  (2T2  +  R^)  ^  Ng  where 

hsnumber  of  sensor  sites  serviced  by  a  support  area  where  a  support  area 
is  the  home  base  of  the  "line"  repairman. 
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Rn  =  average  replacement  time  of  a  module  whose  failure  is  detected  by  Test  2 
and  includes  fault  localization,  removal  and  replacement  of  a  module.  4X.o 
represents  the  25%  utilization  factor  in  the  equation  and  (2T.  +  R„)  represents  the 
time  expended  for  each  failure. 

It  is  recognized  that  both  manning  estimates  should  receive  further  attention 
analytically. 

SUPPLY  AVAILABILITY 


The  Siqpply  Availability  (Ag)  is  the  probability  that  a  site  is  not  inoperable  for 
want  of  a  replacement  module  at  its  normal  storage  point.  The  normal  storage 
point  is  that  established  by  the  maintenance  concept  covered  in  the  system 
maintenance  availability.  The  supply  availability  of  a  site  then  is  taken  as  the 
joint  availability  of  all  module  types. 

A  =  IT.  where 

S  1  1 

A.  =  supply  availability  of  module  type  i 

The  supply  availability  of  a  module  type  depends  upon  its  failure  rate,  inventory 
level,  and  time  delays  between  its  failure  and  return  to  the  ready  inventory.  The 
time  delays,  in  turn,  appear  from  four  sources; 

(a)  Pipeline  delays  caused  by  transport  from  single  site  to  repair  shop 
and  transport  from  the  repair  shop  to  the  supply  point  (T). 

(b)  Waiting  time  in  the  repair  shop  for  a  repair  bench  to  be  free  to  accept 
the  repair. 

(c)  Waiting  time  for  a  repairman  to  be  free  to  accept  a  repair. 

(d)  Actual  repair  time. 

In  contrast  to  the  maintenance  availability,  where  the  required  equations  are 
amenable  to  manual  computation,  the  supply  availability  computations  are  highly 
interactive  and  repetitive,  making  their  programing  on  a  computer  essential.  The 
program  iiq)uts  are  the  equipment  parameters . 

P  =  failure  rate  of  a  given  module  type 

N  .  =  the  average  repair  time  for  a  given  module  type 

=  the  cost  of  a  given  module  type 

X  =  the  site  failure  rate 

The  configuration  parameters 

r  -  the  number  of  sites  using  a  single  siqpply  point 

s  -  the  number  of  sites  using  a  single  repair  shop 

T  -  defined  above 


The  equations  used  in  the  computer  calculations  involving  the  above  parameters 
to  calculate  A.  and  the  cost  trade-off's  are  stJitsd  and  derived  in  the  appendix.  A. 
consists  of  tw^  prime  factors: 

A  =1  (Probability  of  zero  spares  ]+  Conditional  probability  that,  given 
\  shortage)  J  a  spare  shortage,  it  will  not  be 

required  during  the  shortage  period. 

We  have  thus  far  confined  the  analysis  to  the  parameters  associated  with 
maintaining  the  equipment  in  operational  status.  In  reality,  however,  the  ultimate 
in  any  supply  configuration  is  strongly  influenced  by  cost  and  hence  this  must  be 
included  in  the  analysis . 

The  approach  used  in  the  selection  of  the  spare  quantities  is  to  have  the 
program  initially  compute  the  site  supply  availability  with  zero  inventory  of 
spare  modules.  It  next  computes  the  ratio  of  change  in  site  availability  to  module 
cost  for  the  first  purchase  on  each  module  type  and  selects  the  module  t3q)e  having 
the  highest  ratio  for  inclusion  into  spares  inventory.  The  new  availability  inventory 
cost  and  item  selection  are  computed  and  printed.  The  program  next  computes  the 
ratio  of  change  in  site  availability  to  module  cost  for  the  first  purchase  of  each 
module  type  not  previously  selected  and  for  the  next  purchase  of  each  type 
previously  included.  The  module  type  having  the  highest  ratio  is  added  to  inventory, 
and  the  new  availability,  inventory  cost,  and  item  selection  are  computed  and 
printed.  The  inventory  selection  is  continued  until  arbitrarily  stopped  at  a  given 
level  or  availability  or  a  given  inventory  cost.  The  output  is  a  table  of  increasing 
site  availability  versus  inventory  cost,  and  the  associated  inventory  item  identi¬ 
fication.  Example  shown  in  table  3. 

It  must  be  emphasized  that  the  selection  of  one  or  many  module  types  for 
spares  is  strongly  dependent  upon  previous  selections  made;  and,  if  a  spares 
listing  is  made  up  with  this  technique,  a  review  of  all  items  below  a  deleted  item 
must  be  made . 


The  repair  cycle  includes  a  waiting  time  for  the  unavailability  of  a  repair¬ 
man  and  this  effect  must  be  included.  M  is  defined  as  the  number  of  shop 
repairmen  and  the  group  of  shop  repairmen  are  treated  as  an  M-channel  waiting¬ 
line  situation  in  which  the  arrival  rate  is  the  total  arrival  rate  seen  by  the  benches 
(S\),and  the  service  rate  is  the  actual  repair  time  spent  in  fixing  a  module  (u,„). 

A 

From  this  model,  a  value  for  mean  waiting  time  prior  to  actual  service,  but 
subsequent  to  waiting  for  a  bench,  may  be  found  for  adjusting  the  total  bench 
service  rate  (|i).  This  procedure  is  an  approximation  because  jx  is  considered 
the  mean  rate  of  an  exponential  distribution  in  the  sparing  model,  but  the 
adjustment  to  |i  destroys  the  exponentiality.  However,  no  other  recourse  is 
evident.  In  summary  the  procedure  is  to  compute: 


Eq.  14 


E(W)  =_P 


M 


(M-1) 


M-1 

£ 

n-0 


n! 


+  M  ,, 
P  M 


where  p  -  S  \ 


M'  (M-p) 
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This  equation  as  derived  in  the  appendix  gives  the  average  wait  for  a  repair. 

The  machine  computation  input  is 

1  +  E(W) 

Typical  Support  System  Analysis  Calculations: 

In  the  present  section  several  support  configurations  are  postulated,  and  the 
parametric  values  characterizing  the  configurations  are  summarized.  An  analysis 
of  these  configurations  in  regard  to  site  availability  and  the  cost  of  support  will  be 
presented  in  the  following  section.  It  is  felt  that  the  range  of  configurations  consid¬ 
ered  is  sufficiently  broad  to  represent  many  of  the  major  support  possibilities  for 
the  system.  It  should  be  stressed,  however,  that  these  configurations  are  for  illus¬ 
trative  purposes  only  and  that  the  input  values  used  are  extremely  gross  estimates. 

Equipment  Breakdown 

Two  methods  for  dividing  the  site  equipment  into  spare  assemblies  were  used. 
The  first  ccxisiders  a  group  of  10  circuit  cards,  occupying  a  tray  in  a  19-inch  equip¬ 
ment  rack,  as  the  spared  item.  From  preliminary  equipment  diagrams  a  set  of  20 
such  "modules"  plus  several  antennas,  meters,  etc. ,  were  selected,  and  cost  and 
reliability  estimates  were  made  for  each.  We  designate  this  set  as  Equipment  List  A. 

The  second  approach  was  to  consider  a  printed  circuit  board  as  the  spared  item. 
A  figure  of  28  to  30  circuit  card  types  was  selected  and  the  site  equipment  consid¬ 
ered  to  have  a  total  of  some  170  cards.  This  set  of  equipment  is  designated  as 
Equipment  List  B . 

Costs  were  estimated  in  the  range  of  $100  to  $250  per  circuit  card,  and  MTTF's 
were  judged,  in  general,  to  be  greater  than  20,000  hours. 

Site  Mean-Time-To-Failure  (MTTF) 

Three  value  s  were  used  for  the  MTTF  of  the  site:  140,420,  and  840  hours.  This 
will  provide  an  indication  of  the  advantage  if  any  of  redesigning  the  equipment  for  an 
MTBF  improvement  of  a  site. 

Test  2  Efficiency  (P2) 

The  Test  2  check-out  efficiency  (P2)  was  estimated  to  be  95%,  on  the  assumption 
that  a  simulated  signal  will  be  applied  at  the  inputs  of  the  initial  electronic  stages, 
with  normal  processing  and  reporting  channels  used  for  response.  Parametric  var¬ 
iation  of  the  test  efficiency  was  not  included. 

Module  Repair  Facility 

The  repair  characteristics  of  both  modules.  List  A,  and  boards,  ListB,  were 
judged  to  be  such  that  tneir  repair  can  be  performed  on  a  general  purpose,  non¬ 
automatic  repair  bench  using  standard  test  equipment.  Each  module  in  Equipment 
List  A  was,  therefore,  assigned  to  one  bench  class;  similarly,  when  Equipment  List 
B  was  used,  each  board  was  assigned  to  a  single  bench  class.  The  mean  repair 
time,  |jij^,  was  taken  to  be  1  hour  in  either  case. 
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In-line  Repair  Time  and  R2) 


The  mean  replacement  time  (i.e.  ,  fault  localization,  replacement,  and  check¬ 
out)  was  estimated  to  be  35  minutes  for  modules  in  List  A,  and  75  minutes  for  items 
in  List  B  -  i.  e.  , 

„  _  0  _  Tss  minutes  for  List  A 
(_75  minutes  for  List  B 

Rj^  and  R2  will  normally  be  equal.  The  5%  of  the  total  failures  not  detected  by 
Test  2  will  usually  be  similar  in  nature  to  the  remaining  95%.  Provision  is  made  in 
the  model ,  however ,  to  allow  for  variations . 

POSTULATED  CONFIGURATIONS 


For  the  purpose  of  this  analysis,  the  overall  system  is  assumed  to  consist  of  40 
sites,  formed  into  4  groups  of  10  sites  each.  A  support  center  in  each  group  is  lo¬ 
cated  at  a  mean  distance  of  some  500  or  600  miles  from  the  sites  in  its  group.  It  is 
assumed  that  the  sites  may  also  be  divided  into  smaller  groups  of  4  sites  each,  such 
that  an  intermediate  location  at  a  mean  distance  of  some  250  miles  from  each  of  the 
four  sites ,  could  be  used  for  support  purposes . 

On  these  assumptions ,  the  seven  support  configurations  shown  in  Table  1  were 
postulated. 

In  each  configuration,  the  module  (or  board)  repair  facility  is  assumed  to  be  lo¬ 
cated  at  the  support  centers;  hence  s,  the  number  of  sites  per  repair  facility,  is  al¬ 
ways  10.  It  is  also  assumed  that  when  the  supply  point  is  no^ located  at  the  site  - 
namely,  for  configurations  5,6,  and  7  -  each  "line"  repair  team  and  each  periodic 
test  team  carries  a  complement  of  spares  (one  spare  of  each  type).  Thus  the  values 
of  T2  in  Table  1  represent  the  one-way  transportation  time  from  the  support  area  to 
the  site;  and  the  maintenance  transportation  time  for  Test  1,  T  x,  is  assigned  the 
value  of  1/2  hour,  since  Test  1  is  performed  in-iine. 

A  word  should  be  added  regarding  the  values  of  T,  the  repair  cycle  transportation 
time,  in  Tabie  1.  The  normal  one-way  module  transportation,  packaging,  and  handling 
time  between  the  repair  facility  and  remote  areas  is  estimated  to  be  125  hours.  Thus 
for  configurations  1,  2,  3,  5,  and  6,  which  involve  round-trips,  2  x  125  hours  was 
used  for  T.  However,  this  time  is  reduced  in  configuration  4,  since  the  transportation 
of  the  module  can  be  accomplished  by  the  repair  team  returning  to  the  regional  center, 
thus  eliminating  delays  due  to  administrative,  packaging,  etc.  ,  procedures. 

COST  ESTIMATES 


The  following  cost  estimates  are  based  on  a  5-year  operating  period  for  a  system. 
Only  cost  factors  subject  to  variation  within  the  support  configurations  considered  are 
included.  For  example,  the  cost  of  operating  the  repair  facility  is  constant  for  each 
configuration,  and  is  therefore  not  included. 

(1)  Cost  of  a  "line"  repair  team  (Cj^) 


(a)  When  support  area  is  at  site,  =  $210,000. 
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POSTULATED  SUPPORT  CONFIGURATIONS 


center 


personnel  (2  positions,  manned  at  ratio  of  2.5  men  per 
position;  5  men)  =  $190, 000 

test  equipment  (initial  investment)  =  $10, 000 

test  equipment  (operating  and  maintenance)  =  $10, 000 

(b)  When  support  area  is  at  intermediate  location,  and  truck  transporta¬ 
tion  is  used,  =  $420,  000 

personnel  (2  positions,  manned  at  ratio  of  5  men  per  position: 
10  men)  =  $380,  000 

vehicle  (initial  investment,  operating,  and  replacement)  = 

$20,000 

.  test  equipment  (initial  investment)  =  $10, 000 

test  equipment  (operating  and  maintenance)  =  $10, 000 

(c)  When  support  area  is  at  intermediate  location  ,  and  helicopter  trans¬ 
portation  is  used  =  $1,  240,  000 

personnel  (same  as  above)  =  $380,000 

test  equipment  (initial  investment)  =  $10, 000 

test  equipment  (operating  and  maintenance)  =  $10, 000 

.  helicopter  (initial  investment)  »  $250, 000 

.  helicopter  (operating,  maintenance,  and  new)  -  $590,  000 

(d)  When  support  area  is  at  regional  center,  =  $430,  000 

.  Same  as  for  (b),  except  that  vehicle  cost  is  $30,  000  rather 
than  $20,  000 

(2)  Cost  of  a  periodic  test  team  (C^) 

Cg  =  $174,000 

personnel  (3  positions,  manned  at  ratio  of  1  man  per  position: 

3  men)  =  $114,  000 

vehicle  (initial  investment,  operating,  and  replacement)  = 
$30,000 

test  equipment  (initial,  operating  and  maintenance)  =  $30,  000 

(3)  Cost  of  spares  complement  (C^) 

(a)  For  equipment  List  A,  C^  =  $34,  000 

(b)  For  equipment  List  B,  Cg  =  $5,  000 


f 


(4)  One-way  transportation  cost  per  module  (C^)  (site  to  repair  facility) 


(a)  For  Equipment  List  A,  =  $25 

(b)  For  Equipment  List  B,  =  $10 

SYSTEM  ESTIMATES 

The  primary  measure  of  effectiveness  of  a  support  system  is  the  availability  of 
the  "line"  equipment  being  supported.  Since  a  given  availability  can  usually  be 
attained  in  a  variety  of  ways ,  it  is  apparent  that  the  cost  of  achieving  the  given 
availability  provides  a  criterion  for  choosing  between  alternate  ways.  In  the 
present  section,  we  choose  several  availability  levels  for  the  sites,  and  then  deter¬ 
mine  the  particular  configuration  that  minimizes  the  cost  of  support.  The  required 
availability  of  the  individual  sites  can  be  established  only  from  the  analysis  of  the 
overall  system,  and  may  be  high  to  low  depending  on  the  system  interconnection 
redundancy  characteristics.  Hence,  three  exemplary  levels  of  required  site 
availability  were  chosen,  0.85,  0.92,  and  0.98. 

Seven  support  configurations  were  postulated  in  Table  1 .  It  will  be  con¬ 
venient,  at  this  point,  to  enlarge  the  characterization  of  a  configuration  in  the 
following  way.  For  each  configuration  in  Table  1  we  also  specify  a  MTTF,  and 
Equipment  List,  and  a  required  availability.  Since  there  are  three  possible  MTTF 
values  (140,  420,  and  840  hours),  two  Equipment  Lists  (A  and  B),  and  three 
required  site  availabilities  (.85,  .92,  and  .98),  we  thereby  generate  18  new 
configurations  for  each  original  configuration,  or  a  total  of  126  configurations. 
Designate  each  of  these  126  configurations  as  a  simple  configuration. 

We  observe  that  the  parametric  values  for  each  simple  configuration  are 
fixed,  except  for  two  parameters:  the  spares  level  at  supply  points,  and  the 
periodicity  of  Test  1.  Hence,  there  are  also  only  two  cost  variables  for  any 
simple  configuration:  the  investment  in  spares,  and  the  investment  in  periodic 
tests.  Now,  the  periodicity  of  tests,  clearly  varies  inversely  with  the 
number  of  Test  1  teams  (see  equation  (10)  ).  Using  the  maintenance 
availability  model,  we  then  have  a  direct  relationship  between  A  and  the  number 
of  crews  (and  hence  the  cost  of  periodic  testing).  Similarly,  the*^  availability  model 
establishes  the  relation  between  A  and  the  investment  in  spares .  It  is  then 
relatively  sln4)le  to  determine  the"  particular  combination  of  testing  and  spares 
investment  that  minimizes  their  combined  cost. 

It  should  be  noted  that  such  a  combination  may  not  exist,  in  that  the  required 
availability  might  not  be  attainable  for  a  particular  configuration.  Thus,  when 

Eq.  15  _  _ 

A  or  A  >  1 


(where  A  is  the  required  availability),  the  required  availability  is  clearly  not 
obtainable.  In  such  cases,  we  designate  the  configuration  as  insoluble.* 


With  the  configurations  that  are  not  insoluble,  we  may  unambiguously  compute 
all  the  support  costs  associated  with  each  configuration  (exclusive  of  those  costs 
that  are  not  variable  across  configurations** ***).  The  choice  of  the  best  configura¬ 
tion  is  then  simply  a  matter  of  picking  the  configuration  with  the  lowest  cost  or 
acceptable  trade  off  between  cost  and  availability. 

Table  2  lists  the  one  hundred  twenty-six  simple  configurations,  with  a  summary 
of  the  resulting  availability  and  cCfSt. 

The  computer  program  was  utilized  to  provide  spare  parts  information  starting 
from  a  zero  spares  inventory  for  a  tytncal  Table  2  calculation  of  .  98  availability 
and  an  MTBF  of  420  hours.  The  termination  point  is  the  achievement  of  .98 
availability.  Table  4  shows  such  a  list. 

A  typical  cost  analysis  for  the  .98  and  420  hour  calculation  is  shown  in  Table  5 
and  shows  the  total  5  year  costs  for  40  sites. 

CONCLUSIONS: 


With  the  types  of  information  as  shown  in  Table  2  a  realistic  evaluation  and 
selection  can  be  made  with  respect  to  the  optimum  support  system  configuration.  Table 
3  shows  the  best  summary  configurations  and  a  summary  such  as  this  would  provide 
the  basis  for  system  selection.  It  may  be  noted  that  a  cost  improvement  of 
approximately  $200, 000  per  site  over  a  five  year  period  would  be  achieved  if  a 
reliability  improvement  program  was  successful  in  increasing  the  site  MTBF  from 
140  hours  to  840  hours  ’^This  improvement  would  of  course  be  less  the  cost  of  the 
improvement  effort.  The  calculations  show  that  a  .  98  availability  is  impossible 
wi^  the  given  conditions  when  a  site  MTBF  is  only  140  hours. 

As  an  after  the  fact  analysis  the  worth  of  the  Support  System  Analysis  Concept  is 
significantly  diminished  as  compared  to  the  situation  where  it  is  used  as  a  design 
tool  from  the  initiation  of  any  program.  Tools  similar  to  this  are  used  in  the  basic 
equipment  system  design  -  why  shouldn't  they  be  used  for  the  siqjport  system  design? 


*  For  computational  purposes,  the  conditions  of  insolubility  were  actually  some¬ 
what  more  stringent.  The  maximum  A  computed  was  .996;  and  the  maximum 
number  of  periodic  teams  considered  f<fr  the  system  was  12  (resulting  in  a 
periodicity  of  187  hours).  Thus  a  configuration  was  insoluble  whenever 

~A~  >  .996  "a^ 

■^2  „ 

where  A^^  represented  the  value  of  A^^  for  tj^  =  187  hours. 

**  Non-variable  costs  could,  of  course,  also  be  computed;  however,  they  are 
irrelevant  to  our  purpose . 

***  or  420  hours  to  840  hours  in  the  case  of  .  98  availability. 
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♦All  configurations  insoluble  for  this  value. 


Table  4 


RECOMMENDED  SPARES  FOR  SITE  SUPPLY  POINT  (IN-LINE  SPARING) 
(Availability  =  0.  98,  MTTF  =  420  hrs. ) 


Spared 

Item 

Cumulative 

Cost 

Single  Site 
Supply  Availability 

.5443 

1  KC  F/F 

$  250 

.6650 

Low  Speed  Gate 

350 

.6919 

High  Speed  Gate 

450 

.7198 

Radiation  Detector 

500 

.7298 

64  KC  F/F 

750 

.7769 

Amplifier 

900 

.7957 

A/D  Convert 

1050 

.8150 

Regulator  -  Power  Supply 

1200 

.8325 

Filter-info 

1300 

.8426 

Timer 

1350 

.8467 

Antenna 

1450 

.8544 

XFMR 

1550 

.8614 

1  KC  F/F 

1800 

.8787 

Diff 

1925 

.8863 

Logic 

2050 

.8940 

Power  Supply  -  Filter/Rectifier 

2150 

.8994 

Regulator  -  Power  Supply 

2250 

.9048 

Timer 

2400 

.9130 

F/W  Rectifier 

2500 

.9182 

Preamplifier 

2600 

.9235 

5  MC  F/F 

2900 

.9347 

Filter-info 

3050 

.9401 

Timer 

3300 

.9488 

Antenna 

3350 

.9502 

Bhang  Meter 

3650 

.9590 

Blocking  OSC 

3750 

.9618 

Shaper 

3850 

.9645 

1  MC  F/F 

4150 

.9723 

1  Shot  MV 

4325 

.9762 

Comparator 

4500 

.9802 

Comparator 

4675 

.9841 

Delay 

4875 

.9885 

Sensor 

5025 

.9914 

OSC 

5275 

.9934 

64  KC  F/F 

5525 

.9953 

Comparator 

5625 

.9961 

* 


H 


S 


o 


IIIB-17 


♦Item  8  -  Table  3 


LIST  OF  SYMBOLS 


A  -  Overall  Support  System  Availability 

Aj  '  Site  availability  with  respect  to  Test  1 

Ag  “  Site  availability  with  respect  to  Test  2 

Ai  -  Availability  of  a  given  module  type  when  needed 

Aj^  -  Maintenance  Availability 

Ag  -  Supply  Availability 

-  Cost  of  a  "line"  repair  team 

C2  -  Cost  of  a  periodic  test  team 

Cg  -  Cost  of  spares  complement 

-  One-way  transportation  cost  per  module  (site  to  repair  facility) 

Ci  -  Cost  of  a  given  module  type 

E  j^(+q)  -  Average  down  time  per  Test  1  cycle 
Ei(+^)  -  Average  up  time  per  Test  1  cycle 

Average  downtime  for  Test  2  detected  failures 

-  Average  i^)  time  for  Test  2 

E(w )  -  Average  wait  for  a  repair 

M  -  Number  of  shop  repairmen 

h  -  Sites  per  support  area 

-  Number  of  teams  required  to  perform  Test  1  for  all  sites 
Ni  -  Average  repair  time  for  a  given  module  type 


N-  -  Number  of  "line"  repair  teams  per  support  area  required  to 
implement  Test  2  repairs 


LIST  OF  SYMBOLS  (cont'd) 


r  -  Number  of  sites  using  a  single  supply  point 

-  Average  replacement  time  of  a  module  including  fault  localization, 
removal  and  replacement  by  a  spare  module  for  Test  1  detected 
failures 

R2  -  Same  as  R^^  except  for  Test  2  related  failures 

S  -  Number  of  sites  using  a  single  repair  shop 

T  -  Pipeline  delays  caused  by  transport  from  site  to  repair  shop  and 
transport  from  the  repair  shop  to  the  supply  point 

tj^  -  Scheduled  period  of  time  between  periodic  Test  1 

T^  -  Downtime  caused  by  transportation  when  replacing  a  failure  detected 

by  Test  1 

Tn  “  The  travel  time  of  a  repairman  from  home  base  to  the  site  for  Test 
2  detected  failures 

T„  -  Travel  time  of  the  repairman  to  the  site  when  Test  1  detected  failures 
are  remotely  indicated 

T^  -  Travel  time  from  the  supply  point  to  the  site 

T-  -  Time  to  perform  Test  1  -  necessary  when  Test  1  requires  sites  to 
be  non-operating 

V  -  Total  number  of  sites  in  the  system 

pi  -  Failure  rate  of  a  given  module  type 

£  -  Base  of  Naperian  Log 

^  -  Mean  number  of  site  tests  (Test  1)  performed  by  a  team  in  a  unit 

period  of  time 

\  -  Site  failure  rate 

\  -  Site  failure  rate  not  detected  by  Test  2 


LIST  OF  SYMBOLS  (concluded) 


Site  failure  rate  detected  by  Test  2 
Average  overall  repair  time 
Average  repair  time  for  module  repair 


APPENDIX  I 

METHODOLOGY  AND  MODEL  STRUCTURE 


IIIB-21 


TABLE  OF  CONTENTS 


1.  Introduction 

2.  Supply  availability 

2.1  Background 

2. 2  The  derivation  of  p(j;i) 

2. 3  The  derivation  of  A.^ 

2 . 4  Supply  availability  and  module  sparing 

3.  Maintenance  availability 

3. 1  The  derivation  of 

3. 2  A„  and  A., 

2  M 

4.  Site  availability 

5.  Smnmary  of  parameters  and  equations 

5. 1  Input  parameters 

5. 2  Supply  availability  equations 

5. 3  Maintenance  availability  equations 

5.4  System  availability  equations 


IIIB-22 


1. 


Introduction 


This  appendix  describes  the  mathematical  analysis  and  models  used  in  the 
parametric  study  of  the  support  system.  The  major  purpose  of  the  analysis  is  to 
determine  the  availability  of  the  site,  where  availability  is  defined  as  the  probability 
that,  at  any  random  point  in  time,  the  system  is  in  an  operable  state.  It  was  found 
convenient  to  divide  the  analysis  into  two  parts.  The  first  part  develops  a  model  for 
determining  what  is  called  "supply  availability"  -  namely  the  probability  that  a  site 
is  not  down  (i.e.  ,  inoperable)  because  of  supply  shortages.  The  second  part  (sec¬ 
tion  3)  provides  a  model  for  determining  "maintenance  availability,"  which  is  defined 
as  the  conditional  probability  that  the  system  is  operable,  given  that  the  supply 
availability  is  1.0.  As  will  be  shown  (section  4),  the  overall  availability  of  the  sys¬ 
tem  is  then  simply  the  product  of  its  supply  and  maintenance  availabilities. 

2.  Supply  availability 

2. 1  Badi^ground 

We  assume  that  the  site  is  made  up  of  n  modules,  which  are  replaceable  (in¬ 
line)  and  are  repaired  at  some  maintenance  or  repair  installation.  These  modules, 
in  turn,  are  grouped  into  a  number  of  module  types  such  that  each  module  belonging 
to  a  giyen  type,  i,  is  interchangeable  with  any  other  module  belonging  to  that  type, 
but  with  no  module  belonging  to  another  type.  It  is  also  assumed  that  the  site  is 
operable  if  and  only  if  each  module  comprising  it  is  operable.  Hence,  if  we  define 
the  supply  availability  of  the  system ,  Ag ,  as  the  probability  that  the  system  is  not 
down  because  of  supply  shortages,  and  define  the  supply  availability  of  module  type  i, 
as  the  probability  that  no  in-line  module  of  class  i  is  down  because  of  supply 
shortages,  it  follows  that 


(1)  As 


t 


i  =  1 


^i 


where  t  is  the  number  of  module  classes  comprising  the  system. 

In  addition,  it  is  assumed  that,  for  each  site,  there  is  one,  and  only  one,  sup¬ 
ply  point  (which  may  or  may  not  be  located  at  the  site)  at  which  spare  modules  are 
placed.  Similarly,  each  supply  point  has  one,  and  only  one,  repair  shop  that  repairs 
its  failed  modules.  No  restriction  is  made  as  to  the  number  of  sites  using  a  single 
supply  point. 

Now,  if  we  define  the  "supply  phase"  of  a  module  as  the  movement  of  a  module 
from  the  time  it  is  removed  from  the  in-line  system  to  the  time  it  leaves  the  supply 
point  (for  return  to  a  site) ,  the  following  sequence  of  events ,  occurring  during  the 
phase,  may  be  enumerated: 

(1)  The  module  is  transported  from  the  site  to  the  repair  shop. 

(2)  The  module  is  in  a  queue,  awaiting  repair,  at  the  repair  shop. 

(3)  The  module  is  repaired  on  some  bench  at  the  repair  shop. 
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(4)  The  module  is  transported  from  the  repair  shop  to  the  supply  point. 

(5)  The  module  is  at  the  supply  point,  awaiting  a  call  for  use  in  some  in-line 
system.  * 

During  events  (1)  through  (4)  the  module  is  inaccessible  to  any  call  for  in-line  re¬ 
placement,  and  is  hence  designated  as  "non-serviceable.  "  Event  (5)  thus  constitutes 
the  only  portion  of  the  supply  phase  in  which  the  module  is  said  to  be  "serviceable.  " 

By  definition,  any  module  belonging,  say,  to  type  i  may  be  replaced  by  any 
other  module  belonging  to  that  type.  Now,  assume  that  this  interchangeability 
extends  across  systems-  specifically,  to  each  single  site  using  the  same  supply 
point.  Hence,  each  of  these  systems  draws  on  the  same  stock  of  spares  for  any  type 
i  module  failure,  and  we  may  unambiguously  assign  all  spares  used  by  this  group  of 
systems  to  the  supply  point.  Accordingly,  the  analysis  of  the  supply  phase  revolves 
around  the  movement  of  modules  about  the  supply  point,  at  the  conclusion  of  any 
phase,  a  module  may  be  located  at  a  different  single  site  than  the  one  it  originated 
from,  while  it  always  passes  through  and  is  associated  with,  a  single  supply  point.  ** 

The  analysis  of  supply  availability  now  proceeds  as  follows: 

(1)  Consider  the  modules ,  of  type  i ,  that  pass  through  a  single  supply  point 
(i.  e.  ,  the  spares  assigned  to  the  supply  point  plus  the  in-line  modules  of 
the  sites  using  that  supply  point).  Let  J  be  a  random  variable  representing 
the  number  of  these  modules  that  are  non-serviceable  at  some  point  in 
time,  and  let  p  (j,i)  be  the  probability  density  function  of  J.  Our  first  task 
is  to  derive  p  (j;’). 

(2)  Given  p  (j;i) ,  we  next  derive  Ajx’  supply  availability  of  module  type  i, 
where  x  is  the  number  of  type  i  spares  assigned  to  a  supply  point. 

(3)  Given  Aix,  we  finally  derive  a  decision  mechanism  for  sequentially  choos¬ 
ing  spares ,  such  that  each  choice  provides  the  particular  spare  that  max¬ 
imizes  the  incremental  change  in  the  system's  availability  per  imit 
investment. 


*  -  Obviously,  if  the  supply  point  is  separated  from  the  single  site,  the  module 
must  still  be  transported  from  the  supply  point  to  the  site  before  it  can  be  in¬ 
stalled.  However,  this  will  hardly  take  place  before  the  in-line  module  it  re¬ 
places  has  failed  and  been  identified.  The  transportation  time  from  the  supply 
point  to  the  sensor  site  is  therefore  not  considered  part  of  the  supply  phase,  but 
is  included  as  part  of  the  downtime  involved  in  maintenance  availability. 

**  -  It  would  be  possible,  of  course,  to  allow  modules  to  be  exchanged  between  supply 
points  (for  example,  by  re-routing  modules  leaving  the  repair  shop).  However, 
we  have  elected  to  ignore  this  possibility. 
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2.2  The  derivation  of  p  H;!) 


Let 


r  =  number  of  single  sites  using  a  supply  point 
n.  =  number  of  in  use  modules  belonging  to  type  i 
Pj  =  failure  rate  of  a  type  i  module 

The  total  rate  (designated  a  j)  at  which  type  i  modules  fail  and  enter  the  supply  phase 
from  the  r  systems  is  then 

(1)  a  j  =  rn.p. 

We  assume  that  the  failure  generation  is  a  Poisson  process  and  that  a  .  is  constant. 

Now,  let  J  be  a  random  variable  representing  the  number  of  modules  of  class  i 
that  are  non-serviceable;  and  let 

T  =  "transportation"  time: 

the  time  from  the  module's  removal  from  the  in-line  equipment  to  its 
arrival  at  the  repair  shop  (event  1) ,  plus  the  time  from  the  completion  of 
repair  at  the  repair  shop  to  the  module' s  arrival  at  the  supply  point  (event 
4) .  T  is  assumed  constant. 

Q  =  "queue"  time: 

the  time  spent  by  a  module  in  the  repair  shop,  awaiting  repair  (event  2) , 
plus  the  time  required  for  bench  repair  (event  3) . 

X  =  random  variable  representing  the  number  of  modules  in  transport. 

Y  =  random  variable  representing  the  number  of  modules  in  the  repair  queue. 

J  is  of  course  equal  to  X  +  Y;  and  the  probability,  p  (j;i),  that  J  =  j  (any  non -negative, 
integer)  for  type  i  is  the  joint  probability  that  X  =  x  and  Y  =  y,  taken  over  all  com¬ 
binations  of  X  +  y  =  j  (where  x  and  y  are  non -negative  integers) . 

We  observe  that,  under  steady-state  conditions,  a  Poisson  input  to  a  queue  re¬ 
sults  in  a  Poisson  output,  and  that  the  input  and  output  rates  are  the  same.  Hence, 
since  the  entry  of  modules  to  the  supply  phase  is  Poisson  with  rate  a  j,  their  entry 
into  events  2,  3,  and  4  -  and  into  the  composite  events  represented  by  T  and  Q  -  is 
also  Poisson  with  rate  ai.  We  also  note  that,  given  Poisson  inputs  for  a  sequence  of 
queues,  the  nximber  of  objects  in  the  sequence  may  be  found  by  convoluting  the  num¬ 
ber  in  each  sequence.  * 

Thus,  if 

f(x)  =  probability  that  X  =  x 
g(y)  =  probability  that  Y  =  y 

it  follows  that 

(2)  P  a:i)  =  m  *  e  (i) 


*  -  See  R.  R.  P.  Jackson:  "Random  Queueing  Processes  with  Phase-Type  Service"; 
Royal  Statistical  Society  Journal,  series  B,  volume  18,  1956,  pp.  129-132. 
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Since  the  transportation  time,  T,  is  constant  with  a  Poisson  arrival  distribu¬ 
tion,  the  probability  that  X  =  x  is  simply 

(3)  f(x)  =  e~°’  i"^  xl 

The  probability  that  Y  =  y  may  be  found  as  follows.  Let 

c  =  number  of  repair  channels  (benches)  that  can  service  a  module 

=  arrival  rate  at  the  repair  shop  for  all  modules  using  the  particular  set  of 
repair  channels  used  by  module  class  i 

jj.  =  repair  rate 

(The  repair  time  itself  is  assumed  to  be  exponentially  distributed) 

6. 

1 

Suppose  that  there  are  a  total  of  n  modules  in  the  repair  queue  (i.  e. ,  awaiting  repair 
and  in  repair) .  The  probability  that  any  one  of  these  modules  is  from  a  given  supply 
point  and  is  of  type  i  is 


a . 


Hence  the  conditional  probability,  h  (yl  n),  that  there  are  y  modules  from  a  single 
supply  point  and  of  type  i,  given  a  total  of  n  in  queue,  is 

(4)  h(y|n)  =  (J)  yy  (1 


Now,  the  probability,  b(n) ,  that  there  are  a  total  of  n  modules  in  the  repair 
queue  is* 

n 

(5)  b(n)  b  (o)  o  :<  n  <  c 

n 

b(o)  n^c 


*  -  See,  e.g, ,  Goode  and  Machol:  System  Engineering;  1957,  N.Y.  ;  pp  344-6. 
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where: 


2  (c-F) 

1=0 


The  probability  that  Y  =  y,  g(y),  is  then 
00 

(6)  g(y)  =  2  b(n)  h(y|  n) 

n=y 

and,  by  equations  (2),  (3),  (4),  and  (6).  we  have 
00 

(7)  pa:i)  =  f(J)  *  2  b(n)  h(jl  n) 

n=j 

4  Ir  00 

■ST’  ■^i'^  <‘^i'^  I 

=  X  P  ^  ha-k|n)  b(n) 

k=o  n=j-k 

2, 3  The  deviation  of 

We  have  derived  b(j;i) ,  the  probability  that  there  are  j  non-serviceable  mod¬ 
ules.  We  are  now  interested  in  finding  the  siq>ply  availability  of  module  type  ^ix, 
which  is  defined  as: 

the  probability  that  a  site  has  no  in-line  modules  of  type  i  down  because 
of  supply  shortages  (given  x  spares  of  type  i  assigned  to  a  supply  point) . 

If  we  let 

A.  .  =  the  conditional  probability  of  no  supply  shortage  in  module  type  i  at  a 
site,  given  x  spares  and  given  that  there  are  J  non-serviceable  mod¬ 
ules  of  type  i , 

it  follows  that 


j=o 

Now,  so  long  as  the  number  of  non-serviceable  modules,  ],  is  no  greater  than 
the  number  of  spares,  x,  no  siqpply  shortage  exists  at  any  site  serviced  by  the  supply 
point.  When  the  number  of  non-serviceable  modules  is  greater  than  x  +  (r-l)n^ 
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(i.  e.  ,  the  total  number  of  modules  remaining  is  less  than  the  number  required  for 
any  system) ,  a  siqpply  shortage  necessarily  exists  at  every  site.  Hence 


(9) 


y 


when  j  s  X 


when  j  >  X  +  (r-l)nj 


Consider  the  case  when  neither  of  the  conditions  listed  in  equation  (9)  exists; 
that  is,  the  case  when  x  <  j  s  x  +  (r-l)n.  The  number  of  modules  short  in  all  the 
sites  supported  by  a  supply  point  is  then  J>x;  and  Aix.y  represents  the  probability 
that  o  modules  out  of  the  j-x  modules  that  are  short  are  from  a  single  site.  This 
probability  may  be  viewed  as  a  term  of  the  hypergeometric  distribution  thus:  We 
have  a  population  of  nr  elements  (the  number  of  in-line  modules  in  r  systems) .  This 
population  consists  of  j-x  "short"  modules  and  nr  -  (J-x)  operable  modules.  A  group 
of  n  elements  (the  number  of  in-line  modules  in  a  single  site)  is  chosen  at  random; 
and  we  inquire  about  the  probability  that  none  of  the  n  elements  chosen  is  short. 

This  probability  is 


(10) 


for  X  <  j  <  X  +  (r-l)n 


From  equations  (8) ,  (9) ,  and  (10) ,  we  thus  have 

X  +  (r-l)n 


(11)  A 


ix 


^  ba;i)  +  ^ 

i=o  j=x+i 


b(j;i) 


2. 4  Supply  availability  and  module  sparing 

We  now  wish  to  specify  a  routine  for  building  up  a  spares  inventory  in  terms  of 
two  criteria;  the  cost  of  spares ,  and  the  supply  availability  resulting  from  different 
spare  levels.  We  first  consider  the  supply  availability  of  a  site  when  there  are  no 
spares  at  all.  We  then  purchase,  as  our  first  spare,  the  particular  module  that  will 
secure  the  largest  increase  in  availability  per  dollar.  The  second  spare  (which  may 
or  may  not  be  in  the  same  i-class)  is  similarly  chosen,  namely,  as  that  module 
which  secures  the  largest  gain  in  availability  per  dollar,  given  that  the  first  spare 
purchase  has  been  made.  And  so  on,  for  each  successive  spare  purchase. 

We  remind  the  reader  (see  equation  (1))  that  the  supply  availability  of  the  sys¬ 
tem,  A  ,  is 
s 

(^2)  \  =  T\  ^ 

i  =  1 
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(where  t  =  number  of  module  claBses  comprising  the  site) 


Let: 


=  unit  cost  of  type  i  module 

(A  )  =  supply  availability  of  system,  given  m  spares  (of  all  types) 

B  XXI 

given  y  spares  of  type  i 

(a)  The  choice  of  the  first  spare 

When  there  are  no  spares,  A  is  simply 

B 

t 

<Vo  ■  TT 

i  =  1 

Assume  that  the  first  spare  chosen  is  from  class  «.  The  change  in  A  ,  AA  ,  per 
unit  cost  is  then  ^  ^ 


AA^  per  unit  cost  = ' 


(AJ 


s'l 


(Vo 


where: 


(Vl 


10 


'20 


A*°  ^10  "^20 


^♦-1,0  *  ^*1^*+1,0  •"  ^to 
•'  ^*-1,0  ^*1  ^*+1,0  •••  ^to 


Hence 

(13)  AA  per  unit  cost  =  ^ 
s  c , 

1 


(Vo 
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Accordingly,  AA  per  unit  cost  is  greatest  when 
8 


#1 


-  A 


*0 


A  c 
♦o  ♦ 


is  greatest. 


The  first  module  chosen,  therefore,  will  be  that  module  of  class  i  such  that  the  ratio 


(14) 


A. ,  -  A . 
il  io 

A.  c. 
io  1 


is  at  least  as  great  as  the  comparable  ratio  for  any  other  module  type, 
(b)  The  choice  of  the  n^^  spare 


Assume  that  n-1  spares  have  been  chosen  and  that  the  value  of  (As)q_]^  is 
known.  By  specifying  a  rule  for  finding  the  n^“  spare,  we  will  thereby  have  estab¬ 
lished  our  general  method  for  choosing  spares. 

The  n-1  spares  already  chosen  are: 

a  ^  type  1  modules 

a  2  type  2  modules 

a  ■  type  t  modules 

where  a,  +  a„  +  ...  +a=  n-1 ,  and  each  a  .  is  some  integer  between  0  and  n-1. 

X  «  t  X 


The  choices  open 

for  the  n*^  spare  are  thus 

type  1  module 

type  2  module 

type  t  module 

(15) 


Now,  if  a  type  module  is  chosen,  the  change  in  A  per  unit  cost  is 

8 

=  (Vn  -  (^)n-l 


<Vn- 


+  1 
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Thus  our  choice  is  for  the  module  of  type  i  such  that  the  ratio 

(16)  ^i.  Qj  +  1  "  ^ia^ 


is  as  great  as  that  of  any  other  module. 

3.  Maintenance  availability 

The  maintenance  availability  of  the  single’  site  (Am)  is  defined  as  the  condi¬ 
tional  probability  that  the  site  is  operable,  given  that  the  supply  availability  is  1.0. 

As  before,  we  assume  that  the  generation  of  failures  in  the  system  is  a 
Poisson  process  with  a  constant  rate.  In  addition,  we  assume  that  two  distinct  fail¬ 
ure  detection  tests  are  applied  to  the  system; 

Test  1:  A  periodic  test  that  detects  all  failures,  where: 

tj^  =  scheduled  interval  between  tests  (i.  e. ,  the  duration  of  time  from  the 
system's  passing  of  the  test  to  the  next  application  of  the  test) 

=  "replacement"  time  for  a  failure  detected  by  test  1  (where  replace¬ 
ment  covers  the  time  required  to  isolate  the  failure  down  to  the 
module  level,  the  remove  and  replace  time,  and  the  repair  verifica¬ 
tion  time) 

Tj^  =  "transportation"  time  associated  with  a  failure  detected  by  test  1  - 
namely ,  the  time  required  for  the  repair  crew  to  reach  the  in-line 
equipment  (if  it  were  not  present  there  during  the  test) ,  and  the  time 
required  to  secure  a  spare  module  from  the  supply  point. 

Test  2 :  A  continuous  test  that  only  detects  a  certain  portion  of  the  failures , 
where: 

P2  =  proportion  of  failures  detected  by  test  2 

R2  =  "replacement"  time  for  a  failure  detected  by  test  2 

Tg  =  "transportation"  time  associated  with  a  failure  detected  by  test  2 

Let: 

X  =  failure  rate  of  site 

^  1  =  type  1  failure  rate,  where  a  type  -  1  failure  is  a  failure  that  is  not  de¬ 
tectable  by  test  2  and,  hence,  is  only  detectable  by  test  1 

X-  =  type  2  failure  rate,  where  a  type  -  2  failure  is  a  failure  that  is  detectable 
by  test  2.  * 


*  -  Since,  by  hypothesis,  test  2  is  continuous,  all  type  2  failures  are,  in  fact,  detected 
by  test  2  although  they  are  capable  of  being  detected  by  test  1  as  well. 


If  follows  then  that 


Let  Aj  and  represent  the  maintenance  avaulability  in  regard  to  type  -  1  and 
type  2  failures,  respectively.  We  then  have 

(17)  A^=  Aj^  .  A2 

3. 1  The  derivation  of  Ai 


Assume  that  the  site  passes  test  1  at  time  t  =  0.  Test  1  will  next  be  applied  at 
time  t  =  tj.  If  a  failure  is  detected  at  ti,  a  certain  amoimt  of  time  will  be  required 
for  the  replacement  and  transportation  of  modules  before  the  system  is  operable 
again.  Designate  this  time  t2,  and  let  n  =  number  of  type  1  failures  in  ti.  Then* 

(18)  t2  =  n  +  T^ 

Let  T  be  the  point  in  time  at  which  the  first  failure  occurs.  Then  the  total 
downtime,  tj),  consists  of  t2  plus  the  time  from  the  occurrence  of  the  first  failure 
1.  e. , 

(19)  tp  =  (t^  -  T)  +  nR^  +  T^ 

where  t  and  n  are  distributed  functions.  The  up-time  is  simply  t.  The  availability 
under  Test  1  is 


(20)  \  -  E  (y  +  E  (t^ 

where  E  (  )  is  an  expectation. 

For  T  >tj^  the  up-time  is  t^^,  as  the  test  cycle  repeats;  hence 


E(y 


-X^T 


tX, 


d  T  + 1, 


-Xy 


X^e 


r 

S  1  -  e  (X  ^tj 


-x^ti 


+  1)  +  X 


♦  -  Equation  (18)  is  only  approximate,  since  the  generation  of  additional  failures  during 
t2  is  ignored.  When  tj^>>t2,  these  additional  failures  are  of  course  negligible. 
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(21)  E(y  = 


E(tj^  = 


E  (tj  -  T)  +  E  (Tj)  +  E  (nRj^) 
E  (tj^  -  T)  +  E  (Tj)  +  Rj  E  (n) 


The  failures  are  Poisson-distributed;  hence 
(22)  E(I1)  . 


(23)  E(tj-T)  = 


The  constant  Tj^  appears  only  if  any  failure  has  occurred.  Hence, 
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(26)  E(tp)  =  (RjVj  +  l)t^  +  ^1  \1-®  / 

Equations  (20),  (21),  and  (25)  define  the  maintenance  availability  under  Test  1. 


3.2  AgandAj^ 


The  derivation  of  follows  immediately  from  its  definition:  namely. 


A„  = 


mean  uptime 


2  mean  uptime  +  mean  downtime 


(26) 


^2  ^  ^2 


is  then  found  by  taking  the  product  of  A^^  and  Ag  (see  equation  (17)). 
4.  Site  availability 

A  site  is  available  if  it  satisfied  two  conditions: 


(1)  The  site  is  not  down  because  of  supply  shortages.  We  designate  this  con¬ 
dition  as  event  A. 

(2)  The  site  is  not  down  because  of  maintenance  factors  (e.g.  ,  undetected 
failures,  repair,  fault  isolation,  etc.).  We  designate  this  condition  as 
event  B. 


Hence,  if  the  availability.  A,  of  the  system  is  the  probability  that  the  system  is 
available,  it  follows  that 


A  =  P 


P  ^A  J  .  P  ^  j  A  jr 


Pr  {a}  is  of  course  the  supply  availability,  A^,  and  Pr 
tenance  availability,  Aj^,  derived  above.  Thus  we  have 


is  the  main- 


(27)  A  =  A^A^ 

5.  Summary  of  parameters  and  equations 

The  following  is  a  summary  of  the  parameters  and  equations  used  in  the  avail¬ 
ability  models.  These  have  been  rearranged  to  conform  to  the  order  in  which  com¬ 
putations  were  actually  made. 
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The  equations  for  supply  availability  were  programmed  for  the  IBM  7090. 

Those  for  the  maintenance  availability  were  not,  since  computations  for  maintenance 
availability  were  simple  enough  to  be  handled  on  a  desk  calculator. 


5. 1  Input  parameters 

Given  a  total  of  t  module  types  comprising  a  site,  the  following  parameters 
are  associated  with  module  type  i  (i  =  1,  2,  . . . ,  t): 


1.  ~  number  of  modules  (from  a  site)  belonging  to  type  i 

2.  “  normalized  failure  rate  of  a  type  i  module 

j  g  Failure  rate  of  a  class  i  module 

■  ■  ’  Failure  rate  of  site 


b.  =  normalized  failure  rate  of  all  modules  (from  a  site)  using  the  set 
of  repair  channels  used  by  module  type  i 


c. 

1 


imit  cost  of  a  type  i  module 


The  following  input  parameters  are  associated  with  ^  module  types : 


5. 

6. 

7. 

8. 

9. 

10. 

11. 

12. 

13. 

14. 

15. 

16. 


1 

\ 


s 

c 

T 


‘1 

^1  = 

= 

P2  = 

^2  = 
T„  = 


MTTF  of  the  site  per  supply  point 

number  of  sites  using  a  single  supply  point 

number  of  sites  using  a  single  repair  shop 

number  of  repair  channels  (benches)  that  can  service  a  module 

repair  rate  per  bench 

"transportation"  time  for  supply  phase  -  i.  e.  ,  the  time  from  the 
removal  of  module  from  site  to  its  arrival  at  the  repair  shop, 
plus  the  time  from  the  completion  of  repair  to  the  module' s  ar¬ 
rival  at  the  supply  point 

scheduled  interval  of  time  between  test  1 

maintenance  "replacement"  time  for  test  1 

maintenance  "transportation"  time  for  test  1 

proportion  of  failures  detected  by  test  2 

maintenance  "replacement"  time  for  test  2 

maintenance  "transportation"  time  for  test  2 


Parameters  1.  through  10.  constitute  the  input  parameters  for  the  (IBM  7090) 
siqpply  availability  model.  Parameters  5.  and  11.  through  16.  are  the  input  para¬ 
meters  for  the  maintenance  availability  model. 
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5.2 


Supply  availability  equations 


Let: 

Pj  =  failure  rate  of  a  type  i  module 

a  j  =  rate  at  which  type  i  modules  (from  the  r  sites  using  a  single  supply  point) 
enter  the  supply  phase 

5  ^  =  arrival  rate  at  the  repair  shop  for  all  modules  (from  the  s  sites  using  a 

repair  shop)  using  the  set  of  repair  channels  used  by  module  type  i. 

Then 

Pi  =  ^  .  a. 

Q  .  =  r  n.p. 

i  11 

6  ^  =  X  8  b. 

Let: 


P(i;l)  =  probability  density  function  that  J  (the  number  of  non-serviceable 
modules  of  type  i  from  the  r  sites  using  a  supply  point)  =  j . 


Then 


P(J;i)  =  e 


-o.T 
1 


H  b(n) 


-v.n.  fa.T  +  v.n. 
-  i  1  '  I  11 


j: 


n  =  o 


where: 


b(n)  = 


n 

n! 


P(o) 


o  <  n  <  c 


n-c  , 
c  cl 


p(o)  n  ic 


p(o)  = 


c  -  1 


c 

_ E _ 

(c-1)  I  (C-f^ 
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Let: 

=  supply  availability  of  type  i,  given  spares  for  the  supply  point 

Then 

X.  X.  +  (r-l)nj 

i  =  o  j  =  +  1 

The  computational  routine  for  choosing  spares  proceeds  as  follows. 


Let; 

(Ag)j^  =  Supply  availability  of  the  system  for  k  spares  per  supply  point 
(C)j^  =  Spares  investment  for  k  spares 


A.  , ,  -  A. 

0,  =  .h.  y.+l - hJL 

iy  A,  .  c. 

^  iy  1 


Step  0 : 


(A  )  =  TT  A. 

'  s'o  '  '  10 

i  =  1 


(C)o  =  ° 


where:  i  =  1,  2,  ....  t 
y  =  0,  1,  2,  ... 


Step  1: 

Consider  set  =  f  10’  "20 . 

Choose  the  largest  element  of  Q  (If 
choose  any  one) 

Suppose  ^  is  the  element  chosen 


‘"toj^ 

there  are  several  largest  elements , 
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Then: 


<Vi  “  ‘Vo  ir' 


€*  0 


(C)i  =  c  , 


Step  2: 


Consider  set  ,  where  is  the  same  as  O  except  that  u  is  replaced  by 

XX  O  £0 


b) 


e  '1 


Choose  the  largest  element  of 

Suppose  u  „  is  the  element  chosen 

(the  index  a,  in  this  case,  is  either  0  or  1  depending  on  whether  or  not 
e'  =  e") 


Then: 


-  <Vi  ^ 

(Oj  =  c,,  +  o,„ 


Step  n: 


Consider  set  SI  ■,  >  where  Q  ^  is  the  same  as  Q  „  except  that  the  element 
n”X  ii*“X 

chosen  for  the  (n-1)®^  choice,  say,  “  /  _i\  >  is  replaced  by  w 

E  ,  a  E '  ' ,  a+1 

Choose  the  largest  element  of  say  it  is  w 


e(“)  ,  a 


Then: 


^^s^n  ^^s^n-1  A 


E^^^,  a+1 
E<"),  a 


(C)  +c,,  +  ...+C,. 

'  'n  e'  e"  ^(n) 
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5. 3  Maintenance  availability  eauatlonfl 

The  maintenance  availability  of  the  site,  is 


^  • 


A 


2 


where: 


A„  = 


2  1+\2(R2^T2) 


=  (1-P2)X 

^^2  =  P2^ 


5.4  System  availability  equation 

The  oyerall  availability  of  the  site,  A,  is 

A  = 
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SUMMARY 

This  paper  presents  a  technique  for  establishing  the  following  reliability- 
maintainability  criteria:  I)  MTBF  levels  to  be  included  in  procurement  spec¬ 
ifications  which  enable  the  proper  selection  of  equipments  to  meet  a  pre- 
established  system  availability,  2)  calculation  of  system  availability  based 
upon  the  specific  equipments  selected,  and  3)  monitoring  and  analysis  of 
field  operational  data  on  the  communication  system  to  determine  the  degree 
of  success  achieved  in  system  availability. 

Phase  I  concerns  the  development  of  criteria  for  establishing  MTBF's 
that  will  be  required  of  specific  equipment  types  to  be  selected  for  the 
communication  system.  The  criteria  are  predicated  on  the  maximum  number 
of  voice  channel  outage  hours  that  can  be  tolerated  in  the  longest  trans¬ 
mission  path  in  order  to  achieve  a  pre-established  system  availability. 

The  MTBF's  will  be  used  by  Quality  Assurance  in  procurement  specifications 
as  the  minimum  MTBF  that  is  acceptable  for  specific  equipments. 

After  final  selection  of  the  equipments  that  will  comprise  the  communi¬ 
cation  system  has  been  completed,  it  is  necessary  to  insure  that  the  pre- 
established  system  availability  can  still  be  achieved.  This  is  accomplished 
in  Phase  II  of  the  technique.  The  primary  effort  during  this  phase  is  the 
detailed  calculation  of  channel  outage  hours  based  on  the  equipment  selected 
in  Phase  I.  Factors  such  as,  propagation  outage  hours,  manual  or  automatic 
switching  of  subassemb I i es/equipmonts,  etc.  are  included  in  calculating 
channel  outage  hours. 

The  final  phase  of  the  technique  involves  the  monitoring  and  analysis  „ 
of  field  operation  data  on  the  communication  system  to  determine  if  the 
calculated  system  availability  is  actually  being  achieved. 

PHASE  I  -  DEVELOPMENT  OF  CRITERIA  FOR  ESTABLISHING  EQUIPMENT  MTBF'S 

The  European-Mediterranean  Tropospheric  Scatter  Communication  System  is 
a  network  which  will  provide  intracontinental  communications  for  the  United 
States  Air  Force.  This  communication  system  is  to  be  capable  of  continuous 
operation  within  the  specified  performance  limits  with  a  minimum  system 
availability  of  99.9^  per  year.  System  availability  is  defined  as,  "the 
fraction  of  the  total  desired  operating  time  that  the  system  is  actually 
operable".  Since  the  total  desired  operating  time  is  continuous,  the  yearly 
availability  fraction  is  0.999,  and  conversely  the  yearly  unavailability  of 
the  system  is  0.001.  The  total  system  hours  of  outage  in  one  year  based  on 
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i+s  unavailability  fraction  cannot  exceed  (.001)  (8760)  ■  8.76  hours,  if 
the  minimum  system  availability  of  99. 9^  is  to  be  maintained. 

The  system  outage  of  8.76  hours  is  divided  into  two  components:  I) 
that  due  to  equipment  failures,  and  2)  that  caused  by  adverse  fading  in 
the  received  signal  level.  Adverse  fading  in  the  received  signal  level 
which  results  In  system  transmission  outage  is  hereafter  referred  to  as 
propagation  outage.  The  propagation  outage  per  channel  per  year  was  de¬ 
termined  by  path  loss  calculations  in  the  longest  transmission  path  of  a 
channel  at  4.0  hours.  In  reality,  the  exact  amount  of  propagation  outage 
hours  per  year  can  not  be  known  until  sufficient  operational  data,  over  a 
predetermined  time  interval,  have  been  recorded  and  analyzed.  In  order  to 
provide  a  safety  margin  in  the  amount  of  system  outage  caused  by  adverse 
propagation  effects,  the  4.0  hours  were  increased  to  an  estimated  4.76 
hours,  resulting  in  a  maximum  allowable  amount  of  equipment  outage  of 
(8.76-4.76)  “  4.0  hours. 

At  present  a  total  of  sixty  (60)  voice  channels  is  provided  for  in  the 
EUR-MED  System.  Based  on  60  voice  channels  and  the  equipment  outage  per 
year  of  4.0  hours,  the  me  .mum  amount  of  total  channel  outage  cannot  exceed 
(4.0)  (60)  ■  240  hours  per  year.  A  criterion  for  the  development  of  equip¬ 
ment  MTBF's,  therefore,  has  been  established  by  setting  the  240  channel 
outage  hours  as  the  maximum  that  can  be  incurred  by  any  combination  of 
equipments  used  in  the  longest  transmission  path  of  the  EUR-MED  System. 
Figure  I,  Humosa  to  Karamursel  Channei  Transmission  Path,  shows  the  equip¬ 
ment  types  used  in  the  longest  channel  transmission  path  which  originates 
at  Humosa  and  terminates  at  Karamursel.  To  reiterate,  MTBF's  developed  for 
equipments  employed  between  Humosa  and  Karamursel  when  combined  cannot  ex¬ 
ceed  240  channel  outage  hours,  if  the  minimum  system  availability  of  99.9^ 
is  to  be  maintained.  Figure  1  also  shows  that  redundant  equipments,  sub- 
assemblies,  etc.  are  employed  in  the  system  for  improvement  of  reliability. 
Few  formulae  seem  to  be  available  for  calculating  the  availability  of  a 
system  based  on  the  parameter  of  both  reliability  and  maintainability. 
Federal  Electric  Corporation  has  developed  and  utilizes  formulae  for  evalu¬ 
ating  the  availability  of  equipment  where  repair  facilities  must  be  con¬ 
sidered  along  with  reliability.  These  formulae  assumes  that  an  equipments' 
Mean-Time-Between-Fai I ure  (MTBF),  Mean-Time-To-Repai r  (MTTR),  failure  rate 
(\)  and  repair  rate  (M)  are  constant  and  follow  the  Poisson  Law. 

The  different  types  of  equipments  empioyed  in  the  EUR-MED  System  con¬ 
sists  of:  i)  frequency-division  multiplex,  2)  tropospheric  communications, 
3)  I i ne-of-si ght  communications,  and  4)  power  equipment  which  is  composed 
of  diesei  generators  and  motor  generators.  MTBF's  must  be  established  for 
each  of  the  four  equipment  categories  listed  above.  These  MTBF's  do  not 
include  the  effects  of  propagation  system  outage  hours,  but  are  based  solely 
on  the  maximum  number  of  voice  channel  hours  of  outage  expected  at  a  stated 
confidence  level.  Phases  II  and  III  of  this  technique  inciude  propagation 
system  outage  hours  in  calcuiating  the  amount  of  voice  channei  outage  hours. 
As  such,  the  first  equipment  MTBF's  to  be  established  will  concern  itself 
with  the  multiplex  equipment,  the  second  with  the  tropospheric  equipment, 
and  so  on. 
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a.  Multiplex  Equipment  MTBF's 


The  multiplex  equipment  consists  of  the  following  two  or  three  major 
units,  depending  on  the  particular  type  of  station  in  the  voice  channel  trans¬ 
mission  path;  I)  a  voice  channel  unit  consists  of  sixty  (60)  separate  voice 
channel  assemblies,  2)  a  group  channel  unit  consists  of  five  (5)  separate 
group  assemblies,  each  group  assembly  carrying  12  voice  channels,  and  3)  a 
super-group  channel  unit  consists  of  one  (I)  super-group  assembly,  carrying 
5  group  and  6  voice  channel  assemblies. 

If  the  multiplex  equipment  consists  of  I),  2),  and  3)  above  (a  Bl 
multiplex  equipment,  see  Figure  I)  it  would  be  made  up  of  sixty  (60)  voice 
channels,  five  (5)  groups,  and  one  (1)  super-group,  for  a  total  of  sixty-six 
(66)  assemblies.  If  the  multiplex  equipment  consists  of  2)  and  3)  above  (a 
B2  multiplex  equipment,  see  Figure  1)  it  would  be  made  of  five  (5)  groups  and 
one  (I)  super-group,  for  a  total  of  six  (6)  assemblies.  Each  of  the  five 
group  assemblies  of  each  multiplex  equipment  is  in  an  active  parallel  arrange¬ 
ment  with  a  group  assembly  in  another  multiplex  equipment.  The  super-group 
assembly  is  also  in  an  active  parallel  arrangement  with  another  super-group 
assembly.  Each  assembly  in  both  Bl  and  B2  multiplex  equipment  is  assumed  to 
have  an  equal  failure  rate  in  the  development  of  multiplex  MTBF's.  It  should 
be  noted,  that  during  actual  field  operation  of  these  assemblies  the  failure 
rates  exhibited  would  not  be  equal.  In  the  development  of  multiplex  equip¬ 
ment  MTBF's,  howevei',  this  effect  is  not  serious.  Even  if  these  assembiies 
should  exhibit  a  substantial  difference  in  failure  rates,  their  combined 
effect  still  would  not  seriously  alter  the  equipment  MTBF's  that  are  devel¬ 
oped.  Having  established  that  a  constant  failure  rate  for  the  assemblies 
will  be  used  in  this  analysis,  a  repair  time  for  the  multiplex  equipment  is 
required.  Based  on  field  operational  data  on  other  multiplex  equipments,  it 
was  determined  thaf  it  would  take  five  minutes  to  patch  in  a  standby  voice 
channel  assembly  in  the  event  of  a  failure  in  the  voice  channel  unit. 

For  a  given  Mean-Time-Between-Fai  lure  (MTBF)  of  the  multiplex  equip¬ 
ment,  the  failure  rate  of  a  voice  channel  assembly,  group  assembly  and  super¬ 
group  assembly  is  developed  as  follows; 


66 

^i  “ 


where: 


X: 


NlUX 


^  ■  ^3  " . ^66 

^4UX 

66 

the  failure  rate  of  a  voice  channel  assembly  or  a  group 
assembly  or  a  super-group  assembly. 

the  failure  rate  of  the  multiplex  equipment  equal  to  —  . 

MTBF 
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(1)  Voice  Channel  -  The  probability  of  0,  I,  2,  3 
failures  of  a  voice  channel  in  a  time  t  can  be  computed  by 


r 


P 


(r) 


\it 


r 


Since  there  is  more  than  one  (I)  voice  channel  assembly,  it  is 
necessary  to  determine  the  probability  distribution  of  failure  representing 
the  sum  of  the  probability  distributions  of  failure  of  each  voice  channel 
assembly.  This  is  determined  as  follows:' 


where: 


^(R) 


N 

N 

R 

-t  Z  \i 

t  Z  \i 

e  t«l 

_L"i  _ 

_ 

R1 


the  probability  of  R  failures  in  all  the  voice  channel 
assembi les  in  time  t 


t  =  the  time  period  concerned  =  one  year  *  8760  hours 
N 

Z  \i  ■  the  sum  of  the  failure  rates  of  the  voice  channels  from 
L*l  the  1st  to  the  Nth 


N  ■  the  number  of  voice  channel  assemblies 


Derivation  of  the  above  formula  can  be  seen  in  the  following 
where  we  have  a  random  variable  r  whose  probability  distribution  is: 

->wt  ..r 
p  s  Q  t\t) 

f^(r) 

and:  \  and  t  are  the  parameters  of  the  physical  process  that  generates  r. 


Now  we  have  a  group  of  other  random  variables  rj  (i"l,2,3, — N) 
which  are  identically  distributed,  that  is: 


e"^'*’  (Xjt)'"' 

Pi(r:)  » - ; - 

II  r*  •  ' 


and  we  wish  to  find  the  probabi lity  distribution  for  the  sum  of  the  N  random 
variables  r],  that  is,  we  wish  to  find  P(r),  where: 


R 


+  r2  + 


^3  —'■n 


There  is  a  basic  theorum  that  states  that  the  moment  generating 
function  of  the  sum  of  a  set  of  independent  variables  is  equal  to  the  product 
of  their  individual  moment  generating  functions.  The  Poisson  probability 
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distribution  is: 


N 

-\|t  (l+s)  -\2t  (l+s)  -\3t  (l+s)  (l+s)  _  -t  Z  \i  (l+s) 

e  '  e  e  ^  — -  e  •’  “  e 


but  this  is  the  moment  generating  function  of  the  Poisson  probab  i lity  dis¬ 
tribution  and  the  probability  distribution  can  be  computed  by  the  following 
equation;  ^ 

-t  Z 
^  i"i  ' 

^(R)  "  R! 


Since  it 
channel  assembly,  the 
readily  determined  by 
bly  failures  expected 


requires  a  fixed  five  minutes  to  patch  a  failed  voice 
maximum  number  of  voice  channel  minutes  of  outage  is 
calculating  the  maximum  number  of  voice  channel  assem- 
and  multiplying  this  value  by  five  minutes. 


Based  on  field  operational  data  the  MTBF  of  a  typical  multi¬ 
plex  equipment  should  fal I  within  the  range  of  100  hours  to  800  hours. 

Using  this  MTBF  parameter,  the  maximum  amount  of  voice  channel  outage  hours 
was  calculated  in  increments  of  100  hours.  An  example  of  these  calculations 
is  presented  below  where  the  multiplex  MTBF  is  500  hours. 
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MTBF. 

\i 

N 


=  500 

»  500  (66)  ■  33000 
■  . 3030303  X  I O"^ 

“  480  voice  channel  assemblies  in  the  system 


N 

Z  X.  =  480  \,  =  .01454545 
i*l 


-t 


N 

Z  3 


8760  hours 


-127.41818 


RJ 


(127.41818) 

R! 


Using  the  normal  probability  distribution  as  an  approximation  of  the  Poisson 
Probability  Distribution 

a  *  4  =  confidence  level  of  .99994 

np  =  127.41818 

np  +  a  ^Tip  =  127.41818  +  4  (II. 2879)  ■  172.57 
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Therefore,  we  would  expect  no  more  than  173  operational  random  voice  channel 
assembly  failures  at  a  probability  level  of  .99994.  With  a  fixed  five  min¬ 
utes  to  patch  a  failed  voice  channel  assembly,  the  maximum  number  of  voice 
channel  hours  of  outage  expected  due  to  the  failure  of  voice  channel  assem¬ 
blies  is  5/60  (173)"  14.42  hours.  These  values  are  underlined  in  Table  I 
which  shows  the  maximum  number  of  voice  channel  assembly  failures  expected 
at  the  given  probability  level  and  the  associated  number  of  voice  channel 
hours  of  outage  expected  for  different  MTBF|^|yj^_g I ' s  of  the  multiplex  equip¬ 
ment. 


(B, ) 

MTBF. 

1 

Maximum  Number 
of  Voi ce  Channel 
Assembly  Fai lures 
Expected 

Probabi 1 i ty 
Level 

Maximum  Number 
of  Voice  Channel 
Hours  of  Outage 
Expected 

100 

6,600 

739 

.99994 

61.59 

200 

13,200 

390 

.99994 

32.50 

300 

19,800 

271 

.99994 

22.58 

400 

210 

.99994 

17.50 

500 

33.000 

m 

14.42 

600 

39,600 

148 

.99994 

12.34 

700 

46,200 

130 

.99994 

10.84 

800 

52,800 

1 16 

.99994 

9.67 

Table  I.  Maximum  Number  of  Voice  Channel  Hours  of  Outage 
Expected  for  Different  Voice  Channel  Assembly  MTBF's 


(2)  Multiplex  Group  or  Super-Group  MTBF's  -  The  MTBF  of  a  group  or 
super-group  assembly  in  active  parallel  with  another  group  or  super-group 
assembly  respectively,  is  given  by^ 


MTBFc 


+  M 

2” 


where: 

\p  =  the  failure  rate  of  a  group  or  super-group  assembly  path 

M  =  the  repair  rate  of  a  group  or  super-group  assembly  path 

A  repair  rate  (M)  of  one  per  hour  was  used  as  an  estimate  of 
the  true  M,  This  was  based  on  an  analysis  of  DEWLine  data  which  concerned 
thirty-five  (35)  corrective  maintenance  repair  times  on  fifty-seven  (57) 
multiplex  equipments  (Lenkurt  45BXT2  multiplex  in  the  AN/FRC-45).  The 
results  of  this  analysis  indicated  a  repair  rate  of  1.02  per  hour  (MTTR  * 
58.6  minutes).  The  reliability  of  the  group  or  super-group  assembly  com- 
p  lex  IS  given  by3  _ 
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where: 


-(3>._  +  M)  +  + 


-(3\p  M)  -  -t- 


6\p  M  -I- 
6\p  M  t 


t  ■  the  time  period  ■  8760  hours 


Since  the  repair  rate  (M)  is  many  times  larger  than  the  failure 
rate  (M5^\p)j  the  group  or  super-group  assembly  complex  has  an  approxi¬ 
mately  constant  failure  rate  given  by 

2 

X  — 

c  3Xp  +  M 


Now  the  probability  of  0,  I ,  2,  3 .  r  failures  in  a  time  t  of  a  group 

or  super-group  assembly  complex  can  be  computed  by: 


P 


(r) 


Xct 


r 


r’ 


The  Poisson  probability  law  can  be  used  to  determine  the  maximum  number  of 
failures  expected  in  all  the  group  or  super-group  assembly  complexes  at  any 
desired  confidence  level. 


Queueing  theory  was  used  to  determine  the  number  of  voice  channel 
hours  of  outage  due  to  the  failureCs)  of  the  group  or  super-group  assembly 
complexes.^  The  expected  proportion  of  the  operating  time  (d)  that  each 
group  or  super-group  assembly  path  would  be  waiting  in  a  failed  state  while 
the  technician  was  repairing  the  parallel  group  or  super-group  assembly 
path  respectively,  was  computed  by: 


k2 

I  +  2K  +  2k2 


where: 

MTTRp 
^  "  MTBFp 

MTTRp  -  the  Mean-Time-To-Repai r  a  group  or  super-group 
assembly  path  ••  I/M 

Multiplying  d  by  the  sum  of:  I)  the  product  of  the  number  of  group  assem¬ 
blies  in  the  system,  the  number  of  voice  channels  affected  by  a  group 
assembly  failure,  and  the  calendar  operating  time  concerned,  and  2)  the 
product  of  the  number  of  super-group  assemblies  in  the  system,  the  number 
of  voice  channels  affected  by  a  super-group  assembly  failure,  and  the 
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calendar  operating  time  concerned,  the  voice  channel  hours  of  outage  due 
to  the  fai lure(s)  of  the  group  and  super-group  assembly  complexes  is  de- 
termi ned. 


Because  queueing  theory  gives  a  measure  of  the  expected  voice 
channel  hours  of  outage,  it  was  decided  to  be  conservative  during  this 
Phase  of  the  technique  and  increase  the  MTTRp  from  1.0  to  2.0  hours.  This 
would  give  a  measure  of  the  maximum  expected^voi ce  channel  hours  of  outage 
of  the  group  and  super-group  assembly  complexes. 

An  example  of  these  calculations  is  presented  below  where  the 
MTBF  of  the  multiplex  equipment  is  shown  as  500  hours. 


MTBFmux-B2  "  500 

MTBFi  ■  500  (66)  =  33,000 

=  .3030303  X  lO”"^ 

M  ■  1.0 

MTBF_  ■  = — I.QOQP9,Q.9.Q9 - ^^-  544,549,500 

2Xp^  .1836547291  x  I0““ 

S.e  ^2+  -  S2e  ^l'^ 

••  I  _ 


where: 

Si 


-  (3\p  +  M)  +  Xp^  +  6\p  M  + 

2 

-  (3\p  +  M)  +  X.p^  6\p  M  + 

2 

- ( I ■ 000090909 )  t  I . 000090905  _  _  ^  ^  Iq-8 

2 

"2,000^8.181.4  s  -1.000090907 
8760  hours 


S|e  ^2'''  =  .0  X  I0"‘° 

S2e  S|t  „  -1 .0000909076 


_  l.0Q0Q90907e  0000 ’752 

1.000090905 


.999983 


.  -  .9,9,Q9,QQ.P,Q|g^6^47.2p| 

c  1.000090909 


.  1836380347  x  lO"® 
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Group  Assemb I i es 


N  “  140  group  assembly  complexes  in  the  system 

Res  ®  *  .99776  =  the  reliability  of  all  the  group  assembly  complexes 

in  the  system 
N  . 

S  V  =  .257093248  x  10 
i-1 


_  - . 0022 52 1 368  (.0022521368)^ 

R! 

P(o)  "  -997750 
P(j  j  ■  .002247 

P(o)  +  P(l)  " 


t  =  8760 


e 


hours 

N 

i“t  2  \e 

.i.«l 


N 

2  \c 


(R) 


R! 


We  would  expect  no  more  than  I  operational  random  group  assembly  complex 
failure  at  a  probability  level  of  .999997. 


MTBFp  = 

MTTRp  ■ 

MTTRd 

K  s  - ^ 

MTBFp 


33,000 

2.0 


S  -_2aiL. 

33,000. 


.6060606  X  lO""^ 


- - 5.  ,  }<.  ,1,0! 

I  +  2K  +  2K^  1.000121219 


.3672699386  x  lO"® 


t  ~  8760  hours 


Each  group  assembly  contains  12  voice  channels.  There  are  280  group  assem¬ 
blies  in  the  system. 

The  maximum  expected  voice  channel  hours  of  outage  due  to  the 
failure  of  the  group  assembly  complexes  is  (8760)  (12)  (280)  (.3672699  x  10“®) 
■  .1081  hours.  This  value  is  underlined  in  the  Table  2  which  represents  the 
maximum  number  of  group  assembly  complex  failures  expected  at  the  given  prob¬ 
ability  level  and  the  associated  maximum  number  of  voice  channel  hours  of 
outage  expected  for  different  MTSFu^y^'s  of  the  Muitiplex  Equipment. 


IIIC-10 


<D 

Ui 

(0 

4- 

3 

O 


3 

O  > 
X  — 

—  e 

Q>  Q) 
C  V) 
C  (A 
<D  < 

6  ^ 
3 

o  o 
o  u 
O 

>  -H 
c 

H-  Q> 

O  t 


x> 

B 

3 


E 

D 

E 

X 

to 


CM 


■D 

Q) 

■1” 

O 

o 

o. 

X 

UJ 


(0 


IIIC-11 


Super-Group  Assemblies 

N  “  28  super-group  assembly  complexes  in  the  system 

28 

Res  "  Rc  "  .99958  -  the  reliability  of  all  the  super-group  assembly  com¬ 
plexes  in  the  system. 

^  -7 

Z  “  23\^.  -  .51418649716  x  10 


t 

P 


8760 


hours 

N 

“t  z.v 


(R) 


R! 


.  -.000450427371 

-  e 


(.000450427371)*^ 

R] 


P,  ,  ■  .999549 

(o) 


P(,j  ■  .000450 


P(o)+P(l)  "  '999999 


We  would  expect  no  more  than  1  operational  random  super-group  assembly  com¬ 
plex  failure  at  a  probability  level  of  .999999. 


MTBFp 

WTTR, 


33,000 

2.0 


K  = 


OTTRp 

MTBF, 


2,0 

33000. 


.6060606  X  lO”^ 


d  = 


K- 


+  2K  +  2!<2 


>  -O--  /5G9458I  X  10 


r8 


.3672699386  x  10" 


.000121219 


f  =  8760  hours 

Each  super-group  Kssembly  cotit-ains  60  voice  channels.  There  are  56  super¬ 
group  assemblies  in  the  system. 

The  maximum  number  of  voice  channel  hours  of  outage  expected 
due  to  the  failure  of  the  super-group  assembly  complexes  is  8760  (60)  (56) 
(.3672699  x  10“8)  ■  .1081.  This  value  is  underlined  in  Table  3  which 
represents  the  maximum  number  of  super-group  assembly  complex  failures  ex¬ 
pected  at  the  given  probability  level  and  the  associated  maximum  number  of 
voice  channel  hours  of  oufage  expected  for  different  MTSF^^y^'s  of  the 
Multiplex  Equipment. 
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b.  Tropospheric  Equipment  NfTSF’s 


The  tropospheric  communication  complex  consists  of  two  active  par¬ 
allel  paths;  each  path  consisting  of  one  transmitter  in  series  with  two 
receivers  in  an  active  parallel  arrangement  for  quadruple  diversity  recep¬ 
tion  (see  Figure  I),  The  formula  determining  the  MTBF  of  the  two  receivers 
in  one  path  is  given  by; 


3>^  +  M 

where: 

“  the  failure  rate  of  one  receiver 
M  ■  the  repair  rate  of  the  receiver 

Based  on  similar  DEWDrop  data  consisting  of  forty-three  (43)  cor¬ 
rective  maintenance  repair  times  on  two  tropo-transmi tters  and  four  tropo 
receivers  (AN/FRC-47V),  a  repair  rate  of  1.64  per  hour  (MTTR  •  36  minutes) 
was  computed.  This  technique  uses  a  more  conservative  estimate  of  one  per 
hour  for  the  repair  rate  (M)  of  the  tropo  equipment. 

The  MTBF  of  one  transmitter-receiver  path  (one  transmitter  in  series 
with  two  receivers  in  parallel)  is  given  by: 


MTBF. 


TRP 


X-T  +  Xrc 


where: 

T  ■  Transmitter 
R  -  Receiver 
P  =  Path 
C  ■  Comp  I  ex 

Since  the  MTBFpQ  of  the  receiver  complex  is  many  times  greater  than 
the  MTBFt  of  the  transmitter  in  series  with  it,  the  MTBF-pRp  of  the  trans¬ 
mitter-receiver  path  is  for  practical  purposes  dependent  on  the  MTBFj  of  the 
transmitter  alone.  For  example,  if  the  MTOFy  of  the  transmitter  is  equal 
to  750  hours  and  the  MTBFr  of  each  receiver  is  equal  to  750  hours,  the  MTBFjpp 
of  the  transmitter-receiver  path  is  748  hours.  If  the  MTBFr  of  each  receiver 
is  reduced  to  500  hours,  the  MTBFjpp  of  the  transmitter-receiver  path  be¬ 
comes  745.5  hours.  Therefore,  it  can  be  seen  that  a  significant  change  in 
the  MTBFr  of  the  receiver  has  a  negligible  effect  on  the  MTBFtrr  of  the 
transmitter-receiver  path.  Based  on  similar  White  Alice  data  consisting  of 
sixty-four  (64)  corrective  maintenance  failures  on  38  continuously  operating 
10  KW  amplifiers,  an  MTBF  of  855  hours  was  computed;  therefore,  an  MTBF  of 
750  hours  for  a  tropo-transmi tter  is  reasonable. 
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<1 


The  MTBFjrq  of  the  transmitter-receiver  complex  is  given  by: 

+  M 

mtbf  ■  ■  ■  • 


2\- 


■TRP 


The  reliability  of  the  transmitter-receiver  complex  is  given  by 


TRC 


S|  eV  -826  ^l'*’ 


-  (3X^p  +  M)  +  +  6>v,-rp  M  + 


^2  = 


-  l3K^p  +  M)  +  \>^Rp^  +  6>t.rp  M  + 


t  -  the  time  period  ■  8760  hours 


Since  the  repair  rate  (M)  is  many  times  larger  than  the  failure  rate 
(M»\jpp),  the  transmitter-receiver  complex  has  an  approximately  constant 
failure  rate  (Xjrc)  given  by: 

™  3?^p  +  M 

Now  the  probability  of  0,  I,  2,  3  ....  r  failures  in  a  time  t  of  a 
trensmi tter-recei ver  complex  can  be  computed  by: 


P 


(r) 


r 


rj 


and  the  Poisson  probability  law  can  be  used  to  determine  the  maximum  number 
of  failures  expected  in  all  the  transmitter-receiver  complexes  at  any  de¬ 
sired  confidence  level. 


Queueing  theory  was  used  to  determine  the  number  of  voice  channel 
hours  of  outage  due  to  the  failure  of  the  transmitter-receiver  complex. 
The  expected  proportion  of  the  operating  time  Cd)  that  each  transmitter- 
receiver  path  would  be  waiting  in  a  failed  state  while  the  technician  was 
repairing  the  parallel  transmitter-receiver  path, was  computed. 

.  . _ ^ _ 

°  "  I  +  2K  +  2k2 
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where: 


Multiplying  d  by  the  product  of:  I)  the  calendar  operating  time 
concerned;  2)  the  numbers  of  transmitter-receiver  paths  in  the  system;  and 
3)  the  number  of  voice  channels  affected  by  a  failure,  the  voice  channel 
hours  of  outage  due  to  the  failures  of  the  tropo  equipment  is  determined. 
Queueing  theory  as  applied  here  gives  a  measure  of  the  expected  voice  chan¬ 
nel  hours  of  outage;  as  such,  it  was  decided  to  increase  the  MTTRjrp  from 
1,0  hours  to  2,0  hours  in  this  phase  of  the  technique.  This  would  give  a 
measure  of  the  maximum  expected  voice  channel  hours  of  outag 3  of  the  tropo 
transmitter-receiver  complexes. 

Based  on  field  operational  data  the  MTBF  of  a  typical  tropospheric 
transmitter-receiver  complex  should  fall  within  the  range  of  400  to  1100 
hours.  Using  this  MTBF  parameter,  the  maximum  amount  of  voice  channel  out¬ 
age  hours  was  calculated  in  increments  of  100  hours.  An  example  of  these 
calculations  is  presented  below  where  the  MTBF  of  the  receiver  is  750  hours. 

1 

Receivers 
MTBFr  =  750 

>vp  ■  ,001333333 

M  ■  1.0 


^  ,  I  .003999999 

2^  2  ,00000355555555 

R 


282,375  hours 


Transmitter-Receiver  Path 


MTBF. 


TRP 


=  748.013247 


750  282,375 


MTBF, 


_  ^Hrp 


+  M 


TRC  o,  2 
^^RP 


1.004010624  _ 
.0000035744 


280,889  hours 


,  S2t  S|t 
5)6  -  S2e 

S,  -  S, 


where:  .  2  2 

~^^RP  nN'rp  ^\rp  ^  ^ 


S.  “ 
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f 


t  -  8760  hours 
M  ■  1.0 


1 . 004003504 


-.03118122 


hRC  ” 


,004010624 


.35601216905  x  10 


N  e  18  Tropo  transmitter-receiver  complexes  in  the  system, 

*^TRCS  "  ^TRC*®  “  .56919  •  the  reliability  of  all  the  tropo  transmitter- 

receiver  complexes  in  the  system. 

N  A 

Z  =  I8^RC  *  .6408219042  x  10"^ 

i-l 


P(o)  '  •57°433 
Pjlj  ■  .320218 

P(2)  ■  .089879 

Pj2)  “  .016818 

Pj^j  ■  .002360 

P(5j  ■  .000265 

5 

2  P  »  .999973 
R-0 
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Therefore,  we  would  expect  m  more  than  5  operational  random  tropo  trans¬ 
mitter-receiver  complex  failures  at  a  probability  level  of  .999973. 


MTBF-j-pp  ■  748.013247 
MTTRtrp  **  2.0 


_  =  2.0 

MTBFypp  748.013247 


. 00267374944 


- K -  a  .71 4893,6 1  ,I,Q  ■?  s  .7109899354  x  I0“^ 

I  +  2K  +  2K^  1.0054904776 


Each  tropo  transmitter-receiver  path  carried  60  voice  channels. 

There  are  36  tropo  transmitter-receiver  paths  in  the  system.  The  maximum 
number  of  voice  channel  hours  of  outage  expected  due  to  the  failure  of  the^. 
tropo  transmitter-receiver  complexes  is  (8760)  (60)  (36)  (.710989935  x  10  ^) 
K  134.54.  This  value  is  underlined  in  Table  4  which  represents  the  maximum 
number  of  tropo  transmitter-receiver  complex  failures  expected  at  the  given 
probability  level  and  the  associated  maximum  number  of  voice  channel  hours 
of  outage  expected  for  di fferent  MTBFypp's  of  the  tropo  transmitter-receiver 
path. 


c.  Line  of  Sight  Equipment  MTBF's 

There  are  two  1 i ne-of-sight  (LOS)  transmitters  and  two  I i ne-of-si ght 
(LOS)  receivers,  each  in  an  active  parallel  arrangement.  The  MTBFq  of  the 
two  transmitters  or  two -recei vers  is  given  by: 


MTBFj, 


+  M 
2 


where: 

\p  =  the  failure  rate  of  a  transmitter  path  or  a  receiver  path 
M  =  the  repair  rate  of  a  transmitter  or  a  receiver 


The  reliability  of  an  LOS  transmitter  complex  is  given  by: 

S|e  ^2+  _  Soe 

R  „  - & - - 

C  S,  -  S2 


where: 


-(3\p  t  M)  t  6\p  M  t 
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Using  a  repair  rate  (M)  of  one  per  hour  as  in  the  previous  equipment 
(tropo)  and  considering  the  fact  that  the  repair  rate  is  many  times  greater 
than  the  failure  rate  (M  \p),  it  is  assumed  that  the  LOS  transmitter  or 
receiver  complex  has  an  approximately  constant  failure  rate  which  is  given  by: 


3^p  +  M 


Now  the  probability  of  0,  I,  2,  3  .  r  failures  in  a  time  t, 

an  LOS  transmitter  or  receiver  complex  can  be  computed  by: 


of 


and  the  Poisson  probability  law  can  be  used  to  determine  the  maximum  number 
of  failures  expected  in  all  the  LOS  transmitter  and  receiver  complexes  in 
the  system.  Voice  channel  hours  of  outage  due  to  the  failures  of  the  LOS 
transmitter  and  receiver  complexes  was  computed  using  the  queueing  theory 
as  applied  in  the  previous  equipments. 

Based  on  field  operational  data  the  MTBF  of  a  typical  I ine-of-sl ght 
equipment  should  fall  within  the  range  of  500  to  3000  hours.  Using  this 
MTBF  parameter,  the  maximum  amount  of  voice  channel  outage  hours  was  calcu¬ 
lated  in  increments  of  500  hours.  An  example  of  these  calculations  is  pre¬ 
sented  below  where  the  MTBF  of  I i ne-of-sight  complex  is  2000  hours. 


MTBFp  «  2000 
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f 


where 


and; 


-(3\  +  M)  4  M\p  4  6\  M  4 


^2- 


-(3X.  4  M)-  M\  ^  4  6\  M  4 
- B _ 1_E _ B _ 


+  *  8760  hours 
M  ■  1.0 


S,e  ^2^  -  .Ox  I0“*° 


C  -  .  AAixrriK  -.00437562 

S„e  I - 1 .0014995  e 


1 . 00 1  499  5  “ . 004^75o2 

p  ,  Q  ,  .995646 

c  1.00149900 


. 0000005  -fi 

.  =  - ^  .  .499251 1232  x  10 

1.0015 

N  =  4  I i ne-of-sight  equipment  complexes 


Res  “  ~  .982697  =  the  reliability  of  all  the  I i ne-of-si ght 

equipment  complexes  in  the  system 


N 

Z  “  4\^.  =  .  I997'0044928  x  10 


r5 


t  ~  8760  hours 

N  r  N  “|r 
-tS\e  ItZxJ 

®  ;■!  L  ini  -J 


(R) 


iJlL 


R1 


-.017493759  r 

e  .L0L/.4Q37^9}.^ 

R! 


■  .982659 
P^lj  -  .017190 
P^2)  "  .000150 

P(o)  +  P(l)  +  P(2,  •  -999999 
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We  would  expect  no  more  than  2  operational  random  I ine-of-sight  equipment 
complex  failures  at  a  probability  level  of  .999999. 


MTBFp  ■  2000 
MTTRp  ■  2.0 
MTTRp 
*  MTBFp 


2uSL 

2000 


.001 


s  -00000 1 

I  +  2K  +  2K^  I .002002 


.998002  X  10 


Each  LOS  transmitter  or  receiver  path  carries  60  voice  channels. 

There  are  8  LOS  equipment  paths  in  the  system.  The  maximum  number  of  voice 
channel  hours  of  outage  expected  due  to  the  failure  of  the  LOS  transmitter 
and  receiver  complexes  is  (8760)  (60)  (8)  (.998002  x  I0“°)  ■  4.1964.  This 
value  is  underlined  in  Table  5  which  represents  the  maximum  number  of  LOS 
transmitter  and  receiver  complex  failures  expected  at  the  given  probability 
level  and  the  maximum  number  of  voice  channel  hours  of  outage  expected  for 
different  MTBFp's  of  the  LOS  transmitter  and  receiver  complexes. 

d.  Power  Equ i pment 

The  power  equipment  at  each  station  consists  of  four  (4)  diesel 
generators  (DG)  with  one  no-break  motor  generator  (NBMG)  supplying  power  to 
everything  except  the  tropo  transmitter.  The  four  DG's  are  arranged  in 
two  pairs,  each  pair  serving  two  tropo  transmitters.  In  the  event  of  fail¬ 
ure,  one  DG  is  sufficient  to  provide  the  total  tropo  transmitter  power.  One 
of  the  pairs  also  supplies  the  power  to  operate  an  electric  motor  that  drives 
the  NBMG  with  automatic  switching  to  the  other  pair  should  a  failure  occur  in 
the  DG  supplying  the  power  to  the  NBMG. 


One  DG  from  each  pair  supplies  the  base  power.  The  two  remaining 
are  on  a  reserve  status.  Part  of  the  time  one  of  the  two  in  reserve  wi II 
not  be  capable  of  operation.  This  would  be  due  to  corrective  maintenance 
repair  or  a  preventive  maintenance  routine. 


There  are  two  DG's  operating  at  each  of  the  ten  stations  or  twenty 
continuously  operating  DG's  in  the  system.  Based  on  similar  DEWLine  data 
on  one  hundred  twenty-one  (121)  diesel  generators,  forty-four  (44)  corrective 
maintenance  failures  were  reported,  thirty-two  (32)  in  the  diesels  and 
twelve  (12)  in  the  generators,  giving  an  MTBFqq  of  22,044  hours. 


3 


Using  an  MTBFqq  of  15,000  hours  per  DG,  the  probability  of  0, 
r  fai lures  in  a  time  t  of  a  DG  can  be  computed  using; 


P 


(r) 


-^0G+ 
.S _ 


r 


2, 
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and  the  Poisson  probabi llty  law  can  be  used  to  determine  the  maximum  number 
of  failures  expected  in  all  the  OG's  at  any  desired  confidence  level. 

Based  on  field  operational  data  it  would  take  a  maximum  of  fifteen 
seconds  to  restore  p' wer  using  a  reserve  diesel  generator  and  another  equal 
amount  of  time  until  the  tropo  transmitter  was  back  in  operation;  in  effect 
a  path  outage  of  thirty  seconds  per  DG  failure.  However,  if  at  the  time  of 
a  DG  failure  quadruple  diversity  existed  In  both  directions  in  the  tropo 
equipment,  there  is  no  system  outage  time  accrued.  Assuming  an  impossibly 
low  figure  of  merit  of  each  tropo  transmitter-receiver  path  and  that  a 
fai lure  would  have  to  occur  in  one  or  more  of  the  four  tropo  transmitter- 
receiver  paths  within  a  three  hour  time  period  before  the  reserve  DG  was 
powering  the  two  tropo  transmitters,  the  reliability  of  the  four  tropo 
transmitter-receiver  paths  for  a  given  DG  failure  can  be  computed  by: 

R  «  e''^Rp’’’ 


where: 

=  the  fai lure  rate  of  a  tropo  transmitter-receiver  path 
t  ■  the  time  period  considered,  equal  to  three  hours 


Knowing  the  maximum  number  of  failure  expected  in  all  the  DG's 
(computed  previously)  we  can  determine  by  using  the  binomial  probability 
law,  the  maximum  number  of  DG  failures  expected  when  one  or  more  of  the 
tropo  transmitter-receiver  paths  is  in  a  failed  state  for  any  desired 
confidence  level.  The  product  of:  1}  the  maximum  number  of  DG  failures 
expected  when  one  or  more  of  the  tropo  transmitter-receiver  path  is  in  a 
failed  state;  and  2)  the  maximum,  one-half  minute  outage  time  per  DG  fai I- 
Mrs;  and  3)  the  60  voice  channels  affected  by  each  DG  failure  is  the  voice 
channel  minutes  of  outage  due  to  the  failures  of  the  DGs.  This  is  a  con¬ 
servative  estimate  of  the  voice  channel  minutes  of  outage  since  there  are 
certain  combinations  of  dual  diversity  and  quadruple  diversity  in  which  a 
DG  failure  will  not  result  in  voice  channel  outage. 

There  is  one  NBMG  at  each  of  the  eleven  (II)  stations  or  eleven  continuously 
operating  NBMG's  in  the  system.  Based  on  the  previously  mentioned  DEWLine 
data,  twelve  (12)  corrective  maintenance  failures  were  reported  on  the  gen¬ 
erator  giving  an  MTBFq  of  81,000  hours.  The  reliability  of  the  electric 
motor  is  considered  to  be  at  least  as  good  as  that  of  the  generator.  Using 
an  MTBF|I|J0((/)q  of  30,000  hours  for  each  no-break  motor  generator,  the  probability 
of  0,  I,  2,  3  .  r  failures  in  a  time  t  of  a  NBMG  can  bo  computed  by: 

'‘(ry - iT" - 

and  the  Poisson  probabi lity  law  can  be  used  to  determine  the  maximum  number 
of  failures  expected  in  all  the  NBMG's  at  any  desired  confidence  level. 

Based  on  operational  data  it  would  take  an  average  of  one  minute  maximum  to 
restore  power  by  by-passing  the  NBMG  and  supplying  power  directly  from  an 
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operating  DG.  The  product  of:  1)  the  maximum  number  of  NBMG  failures  that 
can  occur;  2)  the  maximum  average  of  one  minute  outage  time  per  NBMG  fai lure; 
and  3)  the  60  voice  channels  affected  by  each  failure  is  the  voice  channel 
minutes  of  outage  due  to  the  failures  of  the  NBMG.  This  is  a  conservative 
estimate  since  several  stations  have  a  diesel  motor  as  a  backup  to  the  elec¬ 
tric  motor  driving  the  NBMG. 

The  sum  of  the  voice  channel  minutes  of  outage  due  to  the  fai lures 
of  the  DG's  and  NBMG's  converted  to  hours  is  the  voice  channel  hours  of  out¬ 
age  caused  by  the  power  equipment. 

For  example,  if  the  MTBF's  of  the  diesel  generator  is  15,000  hours 
and  the  motor  generator  is  30,000  hours,  the  maximum  number  of  voice  channel 
hours  of  outage  is  calculated  as  follows: 


Diesel  Generators 
MTBFpQ  ■  15,000 
t  ■  8760  hours 


Nx3 


15,000 


.666667  X  10“^ 


N  ■  20  operating  diesel  generators  in  the  system 


N 

^G 


P(R)  • 


«  20  ■  .00133333333 


-11.68 


e 


(11.68)' 


R! 


Using  the  Normal  Probability  Oistribtuion  as  an  approximation  of  the  Poisson 
Probability  Distribution 

a  ■  4  ■  confidence  level  of  .99994 


np  ■  I  1 . 68 
np  +  a  ^n^ 

11.68+4  (3.4176)  -  25.35 


We  would  expect  no  more  than  26  operational  random  diesel  generator  fail¬ 
ures  at  a  probability  level  of  .99994 


MTBFjrp  -  399.4341 


t  ■  3  hours 

R^^p  s  e  »  e  “•0300^249  , 
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N  =  26 


q  =  .970405 

.029595 
P"  q 

(.029595)'”  (.970405)^^"’’  >.9999 

s  =  5  at  a  pfobabi lity  level  of  .999907 

We  would  expect  no  more  than  five  D6  fai lures  to  occur  when  one  or  more 
of  the  tropo  transmitter-receiver  paths  is  in  a  failed  state  at  a  proba¬ 
bility  level  of  .999907. 

Outage  time  of  30  seconds  for  each  of  5  DG  fai lures  for  each  of  60 
voice  channels.  30  x  5  ■  150  system  seconds  of  outage  =2.5  system  minutes 
*2.5  voice  channel  hours  of  outage, 

No-Broak  Motor  Generator 

MTBFjijQniiQ  *  30,000  hours 

t  ■  8760  hours 


■q  -  p 


(R) 


^  «26 
.  ^  ^r 
t«o 


=  . 3333333  x  1 0 


''NBMG  30,000 

N  =  II  operating  no-break  motor  generators  in  the  system 


N 

i“l 


(R) 

12 

£ 

r=o 


NBMG 


I  \nbmG  =  .000366666666 


N 


^-t  2  \nBMG 


N 


2  \nbmg 

i°l 


R! 


-3.2 12  o I o .R 
R! 


2  =  .999992 


We  would  expect  no  more  than  12  operational  random  no-break  motor  generator 
failures  at  a  probability  level  of  .999992. 

Outage  time  of  I  minute  per  failure  in  each  of  60  voice  channels 
1  X  12  =  12  system  minutes  of  outage  “  12  voice  channel  hours  of  outage. 

The  voice  channel  hours  of  outage  caused  by  failure  of  the  power  equipment 
is  12  t  2.5=  14. 5  hours. 


IIIC-26 


e.  EUR-MED  Equipment  Procurement  Tables 


The  preceding  paragraphs  concern  the  development  of  equipment  MTBF's 
based  on  the  maximum  amount  of  240  voice  channel  hours  of  outage.  Tables  6 
to  II  show,  for  the  EUR*4^E0  System,  the  maximum  expected  voice  channel  hours 
of  outage  per  year  for  several  MTBF's  of  the  multiplex  equipment,  tropo  equip¬ 
ment,  I ine-of-si ght  equipment,  and  one  set  of  MTBF's  for  the  power  equipment. 
Examination  of  these  tables  show  different  combinations  of  MTBF's  are  required 
for  an  expected  voice  channel  outage  of  240  hours. 

In  using  these  tables  the  minimum  equipment  MTBF's  required  for  a 
specified  maximum  amount  of  voice  channel  hours  of  outage  can  be  determined. 
These  minimum  MTBF's  are  used  by  Quality  Assurance  in  procurement  of  specific 
equipment  as  the  degree  of  reliability  required  for  the  minimum  EUR-MED  system 
availability  of  99,9^. 

PHASE  II  -  TECHNIQUE  FOR  CALCULATING  CHANNEL  OUTAGE  HOURS 

After  final  selection  of  the  equipments  that  will  comprise  the  EUR-MED 
System  has  been  completed,  it  is  necessary  to  insure  that  the  pre-established 
system  availability  of  99.9^  can  still  be  achieved.  This  is  accomplished  in 
Phase  II  of  the  technique.  The  primary  effort  during  this  phase  is  the  cal¬ 
culation  of  channel  outage  hours  utilizing  the  selected  equipments.  Factors 
such  as,  propagation  outage  hours,  manual  or  automatic  switching  of  subassem- 
bl ies/equi pmeni s,  etc.  are  included  in  calculating  channel  outage  hours.  The 
final  selection  of  equipments  in  the  EUR-MED  System  at  this  time,  however, 
has  not  been  completed  since  the  multiplex  equipment  has  not  been  procured. 

For  this  discussion  of  the  channel  outage  calculation  technique  an  example 
of  the  Big  Ral ly  II  Communication  System  is  presented.  These  two  communica¬ 
tion  system  types  are  very  similar,  in  that,  they  both  utilize  the  same  types 
of  equipments,  (e.g.,  multiplex,  tropo,  etc.).  The  channelling  plan  of  the 
Big  Rally  II  System  is  shown  as  Figure  2.  It  can  be  seen  in  this  figure  (2) 
that  the  majority  of  voice  channels  originate  at  Station  ID  and  terminate 
at  various  stations  in  the  system.  In  the  following  example,  only  the  avail¬ 
ability  calculation  of  channel  number  6  is  presented,  although  all  Big  Rally 
11  channel  availabilities  would  be  calculated  in  the  same  manner. 

In  order  to  calculate  the  availability  of  channel  6,  an  equivalent  rep¬ 
resentation  of  its  signal  path  from  point  of  origin  to  terminus  had  to  be 
developed.  To  accomplish  this,  the  equipments  employed  in  providing  channel 
6  were  analyzed  to  determine  the  signal  path  through  their  subassemblies. 

If  the  signal  path  was  in  seri es  with  all  the  parts  used  in  the  subassembly, 
then  the  entire  subassembly  was  represented  as  a  block.  On  the  other  hand, 
if  the  parts  used  in  the  subassembly  provided  a  parallel  path  for  the  chan¬ 
nel  signal,  then  the  parts  were  segregated  into  two  blocks,  each  block  in 
parallel  with  the  other,  but  still  representing  a  series  signal  path  for 
channel  6.  This  method  of  segregating  parts  in  subassemblies,  is  continued 
until  the  entire  signal  path  of  channel  6,  from  its  point  of  origin  to 
terminus,  is  shown  as  a  series  and  parallel  block  configuration.  The  block 
configuration  for  channel  6  is  shown  as  Figure  3.  The  availability  calcu¬ 
lated  for  channel  6  is  a  function  of  the  Mean-Time-Between-Fai lure  (MTBF) 
and  Mean-Time-To-Repai r  (MTTR)  for  each  block  shown  in  Figure  3.  MTBF  and 
MTTR  values,  therefore,  were  determined  for  each  block. 
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VOICE  CHANNEL  HOURS  OF  OUTAGE 

FOR  DIFFERENT  MTBF'S  OF  THE  EQUIPMENT  IN  THE  EUR-MED  TROPO  SYSTEM* 


TABLE  6 

LOS  MTBF  =  500 


Tropo  Equipment  (MTBF) 


400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

618 

450 

358 

303 

283 

267 

242 

224 

21  1 

200 

585 

417 

325 

269 

250 

233 

209 

191 

178 

300 

574 

406 

314 

259 

239 

223 

198 

180 

167 

Multiplex 

400 

569 

400 

309 

253 

234 

217 

193 

175 

162 

Equi pment 

500 

566 

397 

306 

250 

230 

214 

190 

172 

159 

(MTBF) 

600 

563 

395 

303 

248 

228 

212 

187 

170 

157 

700 

562 

394 

302 

247 

227 

21  1 

186 

168 

1  55 

800 

561 

392 

iOi 

245 

276 

209 

185 

167 

154 

TABLE  7 

LOS.  MTBF  =  1000 


Tropo  Equipment  (MTBF) 


400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

568 

400 

308 

253 

233 

217 

192 

174 

161 

200 

535 

367 

275 

219 

200 

183 

159 

141 

128 

300 

524 

356 

264 

209 

189 

173 

148 

130 

1  17 

Multiplex 

400 

■sig 

351 

259 

203 

184 

167 

143 

125 

1  12 

Equ i pment 

500 

516 

347 

256 

200 

180 

164 

140 

122 

109 

(MTBF) 

600 

513 

345 

253 

198 

178 

162 

137 

120 

107 

700 

512 

344 

252 

197 

177 

161 

136 

1  18 

105 

800 

ILL 

342 

2^ 

195 

176 

159 

135 

1  17 

104 

*  Power  Outage  Included 

MTBF  of  each  no-brcak  motor  generator  is  30,000  hours 
MTBF  of  each  diesel  generator  is  15,000  hours 


IIIC-28 


VOICE  CHANNEL  HOURS  OF  OUTAGE 

FOR  DIFFERENT  MTBF'S  OF  THE  EQUIPMENT  IN  THE  EUR-MED  TROPO*  (Cont. ) 

TABLE  8 

LOS.  MTBF  ■  1800 


Tropo  Equipment  (MTBF) 


400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

559 

390 

299 

241 

224 

207 

183 

165 

152 

200 

525 

357 

266 

210 

190 

174 

149 

132 

1  19 

300 

515 

347 

255 

199 

180 

163 

139 

121 

108 

Multiplex 

400 

509 

341 

250 

194 

174 

158 

133 

1  16 

103 

Equ i pment 

500 

506 

338 

246 

191 

171 

155 

130 

1  13 

99 

(MTBF) 

600 

504 

336 

244 

189 

169 

153 

128 

1  10 

97 

700 

503 

334 

243 

187 

167 

151 

127 

109 

96 

800 

501 

333 

241 

186 

166 

150 

125 

108 

95 

TABLE  9 

LOS. 

MTBF  = 

2000 

Tropo  Equipment 

(MTBF) 

400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

555 

387 

295 

240 

220 

204 

179 

162 

149 

200 

522 

354 

262 

207 

187 

171 

146 

128 

1  15 

300 

512 

343 

252 

196 

176 

160 

135 

1  18 

105 

Mu  Iti  p  1  ex 

400 

506 

338 

246 

191 

1  /I 

155 

130 

1  12 

99 

Equi pment 

500 

503 

535 

243 

188 

168 

152 

127 

109 

96 

(MTBF) 

600 

501 

333 

MI 

186 

166 

150 

125 

107 

94 

700 

499 

331 

239 

184 

164 

148 

123 

106 

92 

800 

498 

m 

238 

183 

163 

147 

122 

104 

91 

*  Power  Outage  Included 

MTBF  of  each  no-break  motor  generator  is  30,000  hours 
MTBF  of  each  diesel  generator  is  15,000  hours 
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VOICE  CHANNEL  HOURS  OF  OUTAGE 

FOR  DIFFERENT  MTBF'S  OF  THE  EQUIF=MENT  IN  THE  EUR-MED  TROPO  SYSTEM*  (Cont.  ) 

TABLE  10 
LOS.  MTBF  =  2500 


Tropo  Equipment  (MTBF) 


Multiplex 
Equ i pment 
(MTBF) 


Mu  1  ti  p  I  ex 
Equ i pment 
(MTBF) 


400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

554 

386 

294 

239 

219 

203 

178 

160 

147 

200 

521 

352 

261 

205 

186 

169 

145 

127 

1  14 

300 

510 

342 

250 

195 

175 

159 

134 

1  16 

103 

400 

505 

336 

245 

189 

1  70 

153 

129 

1  1  1 

98 

500 

501 

333 

242 

186 

166 

150 

125 

108 

95 

600 

499 

331 

239 

184 

164 

148 

123 

106 

92 

700 

493 

330 

238 

182 

163 

146 

122 

104 

91 

000 

497 

328 

237 

181 

161 

145 

121 

103 

90 

TABLE  I! 

LOS.  MTBF  =  3000 


Tropo  Equipment  (MTBF) 


400 

500 

600 

700 

750 

800 

900 

1000 

1  100 

100 

553 

385 

293 

238 

218 

202 

177 

159 

146 

200 

520 

352 

260 

205 

185 

169 

144 

126 

113 

300 

509 

341 

249 

194 

174 

158 

133 

115 

102 

400 

504 

336 

244 

189 

169 

153 

128 

1  10 

97 

500 

501 

332 

241 

185 

166 

149 

125 

107 

94 

600 

499 

330 

239 

183 

163 

147 

122 

105 

92 

700 

497 

329 

237 

182 

162 

146 

121 

103 

90 

800 

496 

328 

236 

180 

161 

144 

120 

102 

89 

*  Power  Outage  Included 

MTBF  of  each  no-break  motor  generator  is  30,000  hours 
MTBF  of  each  diesel  generator  is  15,000  hours 
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a.  Mean-Time-Between-Fai lure  (MT3F) 


The  Mean-Time-Between-Fai lure  (MTBF)  for  each  block  was  determined 
from  two  sources  of  data;  I)  field  operational  data  from  identical  equip¬ 
ments,  and  2)  MTBF's  calculated  using  part  failure  rates  and  methods  out¬ 
lined  in  the  RADC  Notebook  TR-58-111,  31  December  1961,  Section  8. 

Field  operational  data  used  in  calculating  block  MTBF's  covered  a 
period  of  one  year  of  continuous  operation.  These  MTBF's  were  calculated 
using  the  expression:  (operating  population)  (operating  time)/number  of 
interruptions.  This  expression  assumes  that  the  times-between-i nterruptions 
are  exponentially  distributed.  An  interruption  of  service  is  a  catastrophic 
chance  failure  which  occurs  during  normal  operation. 

The  block  MTBF's  that  were  calculated  using  the  TR-58-111  method 
are  also  predicated  on  the  catastropliic  chance  type  of  part  failure.  The 
MTBF  of  a  block  using  this  method  is  determined  by:  I)  calculating  the 
fai  I  ure  rate  for  each  part  whose  independent  failure  would  cause  the  loss 
of  the  signal  path  of  channel  6  based  on  the  electrical  and  thermal  stresses 
to  which  the  part  is  subjected;  2)  summing  the  failure  rates  for  all  such 
parts  employed  in  a  block;  and  3)  taking  the  reciprocal  of  the  sum  of  the 
part  fai lure  rates  to  determine  the  MTBF. 

Stated  in  mathematical  form,  assuming  N  parts  in  a  given  block, 
the  fai lure  rate  of  the  block  becomes:  ■ 


i“N 

®  2  (\p  +  +  \g) 

i“l 


where: 

-  total  failure  rate  for  the  block  under  study  while  it 
is  functioning  under  specified  operational  circuit  and 
environmental  conditions. 

\p  ■  conventional  part  quality  in  terms  of  a  nominal  or 
quiescent  failure  rate. 

■  failure  rate  term  accounting  for  an  increased  or  de¬ 
creased  failure  probability  arising  from  circuit  appli¬ 
cation  (electrical  stress).  • 

Xg  ■  failure  rate  term  accounting  for  an  increased  or  de¬ 
creased  failure  probability  arising  from  environmental 
(primarily  thermal)  effects. 

From  the  total  block  failure  rate  (Xj),  the  block  MTBF  is  calculated. 

This  MTBF  is  simply  the  reciprocal  of  the  total  failure  rate,  as  follows: 
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Block  MTBF  -  l/Twy 


r 


b.  Mean-Time-To-Repai r  (MTTR) 


The  Mean-Time-To-Repai r  (MTTR)  for  each  block  was  determined  from 
two  sources  of  data,  as  follows:  I)  field  operational  data  from  identical 
equipments,  and  2)  engineering  estimates  from  the  equipment  manufacturer. 

The  MTTR  value  is  defined  as  "the  time  required  to  locate,  isolate, 
disassemble,  interchange,  reassemble,  align  and  checkout  a  malfunction". 

It  does  not  include  any  time  incurred  while  waiting  for  replacement  parts 
that  are  not  immediately  available  or  any  other  non-related  repair  factors. 
The  repair  rate  (p)  is  the  reciprocal  of  the  Mean-Time-To-Repai r  and  is  the 
number  of  repairs  that  could  be  accomplished  in  the  unit  measure  of  time. 

In  contrast  to  the  failure  rate  (X.),  the  repair  rate  (p)  has  no  significant 
operational  meaning,  but  is  just  used  to  simplify  statistical  formulae. 

c.  Calculation  of  Channel  6  Availability 


The  availability  of  channel  6  is  calculated  using  standard  laws  of 
probability  theory.  In  using  the  standard  laws  of  probability,  the  channel 
6  block  configuration  shown  as  Figure  3,  is  segmented  into  portions.  Each 
portion  representing  a  specific  amount  of  channel  6  availability,  or  con¬ 
versely,  channel  6  unaval I abi I ity  (i.e.,  downtime). 

To  clearly  illustrate  the  technique  used  in  segmenting  the  signal 
path  into  portions  and  the  formulae  used  to  calculate  channel  6  availability, 
the  following  three  examples  are  presented.  Consider  first  a  block  such  as 
the  channel  modulator  in  the  MC-50  Equipment  shown  in  Figure  3  and  repeated 
here  for  convenience.  This  block  represents  a  portion  of  the  signal  path  of 
channel  6  and  is  called  a  simple  element. 


r  - - - - 

( 

1 

1 

1 

I 

^  '  !  Channel 

1  Modu 1 ator 

( 

I 

I 

A  Simple  Element 


The  expected  proportion  of  continuous  operating  time  that  channel  6 
is  not  operating  (i-e-i  downtime,  d)  due  to  the  fai  lure  of  this  simple  ele¬ 
ment  is  calculated  by:^ 


where: 


.  — X—  = _ MEEB _ 

°  X.  t  p  MTBF  +  MTTR 
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X.  is  the  element  constant  failure  rate  and  is  equal  to  l/MTBF 
p  is  the  element  constant  repair  rate  and  is  equal  to  I /MTTR 


MTBF  is  the  Mean-Time-Between-Fai lure 
MTTR  is  the  Mean-TIme-To-Repalr 

Ck)nsider  next>  a  number  of  blocks  in  which  the  signal  path  is  a 
simple  series-parallel  configuration  of  blocks.  An  example  of  this  condi¬ 
tion  occurs  in  Figure  3  where  the  signal  path  of  channel  6  enters  the  base¬ 
band  amplifiers  of  the  MC-50  equipment  and  traverses  through  a  portion  of 
the  AN/MRC-85  Exciter  Equipment  to  the  point  where  automatic  switching  of 
exciters  is  available.  The  configuration  of  these  blocks  is  called  a  com¬ 
plex  element  and  is  presented  below. 


A  Complex  Element 


The  expected  proportion  of  continuous  operating  time  that  channel  6 
is  not  operating  (i.e.,  downtime,  d)  due  to  the  failure  of  this  complex  ele¬ 
ment  is  calculated  by: 


d 


21? 


I  +  2K  + 


where: 


K  i s  the  ratio  of  X/p 


\  ■  the  constant  failure  rate  of  the  base-band  amplifier  (BBA) 
and  the  Exciter  A  (EA)  in  series  with  it 

=  ^BA  ^EA 

p  =  the  constant  repair  rate  of  the  base-band  amplifier  and  the 
Exciter  A  in  series  with  it 
a  ,  ...A. . 

bsL  *  ^ 

^BBA  ^EA 
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There  is  one  repair  crew 
The  two  blocks  are  identical 


The  downtime  (d)  is  the  expected  proportion  of  the  time  that  a  repair 
crew  will  be  repairing  a  failed  8ase-Band  Amplifier  or  Exciter  when  the  other 
Base-Band  Amplifier  or  Exciter  is  in  a  failed  condition.  In  other  words,  d 
is  equal  to  the  time  that  both  channel  paths  are  Inoperable. 

The  following  example  is  composed  of  a  number  of  blocks  in  a  very 
complex  configuration. 


I.. 


A  Very  Complex  Element 


This  very  complex  element  is  found  in  the  AN/MRC-85  Equipment  where 
automatic  switching  of  exciters  is  available,  and  ends  at  the  combiner  out¬ 
put  of  the  signal  path  in  the  quadruple  diversity  receivers. 

The  expected  proportion  of  continuous  operating  time  that  channel  6 
Is  not  operating  (i.e.,  downtime,  d)  due  to  the  failure  of  this  very  complex 
element  is  calculated  in  the  following  paragraphs. 

The  failure  rate  (\r)  and  the  expected  repair  rate  (np)  of  the  re¬ 
ceiver  CR)  which  consists  of  one  parametric  amplifier  CPA)  in  series  with 
its  combiner  (C),  is  calculated  as  follows: 


“  ^PA  + 


\pA  t  Kq 
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The  expected  proportion  of  continuous  operating  time  that  channel  6 
is  not  operating  (i.e.,  downtime,  d)  due  to  the  failure  of  this  very  complex 
element  is  calculated  by  the  following  steps: 

Step  I 


The  failure  rate  0^)  and  the  repair  rate  (fig)  of  the  receiver  (R)  consisting 
of  one  parametric  amplifier  (PA)  In  series  with  Its  combiner  (C),  is: 


Xg  ■  XpA  +  Xc 

bL 


PR 


*PA 


Step  2 

The  failure  rate  (X-q)  and  repair  rate  (|a,r)  of  two  receivers  in  parallel 
3  is:  2 

X  ■  — ^ 

2R 


where: 


d  s 


jjs: 


t  2K  t 


2K^ 


and; 

K  is  the  ratio  of  Xg/Pg 

Xg  is  the  constant  failure  rate  of  one  receiver 
Pg  is  the  constant  repair  rate  of  the  receiver. 

Step  3 

The  failure  rate  (X)  and  repair  rate  (p)  of  one  Exciter  B,  the  10  KW  trans¬ 
mitter  and  the  two  parallel  receivers  In  series  with  each  of  them  Is: 


^  "  ^EB  ^ 

p  ■  .  ■  ■  I 

PEB  PT  P2R 
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step  4 


The  expected  proportion  of  continuous  operating  time  that  channel  6  is  not 
operating  (i.e.,  downtimei  d)  due  to  the  failure  of  this  very  complex  ele¬ 
ment  Is: 


d  a 


_ 2|£ _ 

I  +  2K  +  2k2 


where: 


K  a  X/n 


\  =  the  failure  rate  of  one  Exciter  B,  the  lOKW  Transmitter 
and  the  two  parallel  receivers  in  series  with  them. 

p  •  the  repair  rate  of  one  Exciter  B,  the  lOKW  Transmitter 
and  the  two  parallel  receivers  in  series  with  them. 

The  preceding  example  illustrated  how  the  signal  path  of  channel  6, 
composed  of  simple,  complex  or  verycomplex  elements,  is  reduced  to  a  series 
arrangement  of  elements,  and  the  technique  for  determining  the  channel  down¬ 
time  assignable  to  each  element. 


The  expected  propagation  outages  between  the  stations  in  the  signal 
path  of  channel  6  were  provided  by  the  Big  Rally  li  Engineering  Project  Office. 
Outage  due  to  power  failures  and  outage  incurred  by  manual  switching  between 
subassemblies  are  also  included  in  the  availability  calculations. 


The  availability  of  channel  6  is  the  product  of  the  availabilities 
of  the  elements  in  the  signal  path  and  is  computed  using  the  following  for¬ 
mula. 


Channel  6  Aval labi I ity  (CA-6) 


where: 

(CA-6)  is  the  proportion  of  the  total  desired  operating 
time  that  channel  6  is  operable, 

N  is  the  number  of  elements  in  the  signal  path  of  channel  6. 

dj  is  the  proportion  of  the  total  desired  operating  time  that 
the  ith  element  in  channel  6  is  inoperable. 

is  the  expected  propagation  outage  between  the  stations 
°  in  the  signal  path  of  channel  6. 

PEp  is  the  expected  outage  due  to  power  failures  in  the  signal 
path  of  channel  6. 
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Table  12  shows  the  availability  calculations  for  channel  6.  As 
seen  in  this  table  (12)  the  availability  calculated  for  channel  6  is: 

100 

Acp  =  n  (l-dl)  *  0.99882  or  99.88^ 

1*1 


PHASE  1 1 1  -  MONITORING  AND  ANALYSES  OF  FIELD  SYSTEM  OPERATIONAL  DATA 


The  final  phase  of  this  technique  involves  the  monitoring  of  field 
operational  data  on  the  EUR-MED  System  to  determine  if  the  calculated  sys¬ 
tem  availability  is  actually  being  achieved.  In  order  to  accomplish  this 
objective,  a  field  failure  reporting  system  is  required.  It  is  planned  that 
the  EUR-MED  System  will  utilize  a  standard  failure  reporting  form.  A  pre¬ 
liminary  version  of  this  form,  the  Site  Outage  and  Discrepancy  Report,  is 
shown  as  Figure  4.  The  specific  entries  that  will  be  used  to  monitor  and 
analyze  the  EUR-MED  System  availability  in  this  report  will  be  block  numbers 
3,  10,  and  If.  Block  3  indicates  the  specific  voice  channel  circuit.  Block 
10  indicates  the  exact  time  that  the  voice  channel  service  was  interrupted 
and  block  II  Indicates  the  exact  time  the  voice  channel  service  was  restored. 
Other  blocks  in  the  failure  report  form  permit  monitoring  and  evaluation  of 
MTBF's  and  MTTR's  of  the  equipments,  subassemblies,  etc.  In  addition,  high 
failure  rates  of  specific  parts,  high  cost  parts,  non-standard  parts,  etc. 
are  also  obtained  from  the  data  shown  in  the  reporting  form. 

Since  the  equipment  in  the  EUR-MED  System  operate  continuously  (24  hours 
a  day)  no  equipment  operational  time  logs  are  necessary.  Therefore,  the 
formula  used  to  calculate  the  EUR-MED  System  Availability  (A)  is: 

N 

CT-  L  Ci  ti 

A  =  - - X  I00J( 

where: 

C  =  the  number  of  channels  in  the  system 

T  ■  the  calendar  time  involved  ■  one  year 

Ci  ■  the  number  of  channels  incapacitated  during  the  ith  failure 

ti  ■  the  length  of  time  the  channels  were  incapacitated  during 
the  ith  fai lure 

N  ■  the  number  of  fai lures  that  occurred  in  the  time  T 
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(I)  Common  to  both  the  Transmit  and  Receive  Path 
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Figure  4  (CDn+inued)  Preliminary  Site  Outage  and  Discrepancy  Repcx't  (Back) 
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SUMMARY 

The  use  of  redundancy  with  provision  for  rapid  repair  and  replace¬ 
ment  of  components  can  greatly  increase  the  reliability  and  availability  of  a 
system.  The  systems  considered  in  this  paper  make  use  of  standby  redun¬ 
dancy  (instantaneous  replacement)  .with  and  without  capabilities  for  the  indi¬ 
vidual  components.  The  basic  system  considered  has  two  components  in 
series  and  another  in  standby  which  is  capable  of  replacing  either  of  the 
series  components  should  one  of  them  fail.  The  reliability  and  availability 
of  this  system,  with  and  without  repair,  are  derived.  From  these  mathe¬ 
matical  models  the  expressions  for  the  reliability  and  availability  of  a 
system  of  n  components  in  series  with  k  redundant  or  spare  components  are 
derived.  The  improvements  due  to  repair  and  redundancy  are  discussed. 

Some  properties  of  the  eiqponential  distribution  are  derived  and  discussed  in 
order  to  facilitate  the  derivation  of  the  redundancy  formulas. 

INTRODUCTION 

System  reliability  will  be  defined  as  the  probability  that  the  system 
performs  its  specified  function  for  a  specified  period  of  time.  Availability 
will  be  the  probability  of  the  system  functioning  at  a  particular  time  regard¬ 
less  of  the  previous  history  of  the  system.  A  redundant  system  is  one  which 
employs  more  than  the  minimum  required  number  of  components  to  perform 
its  function  Thus,  a  system  with  standby  6r  spare  components  is  considered 
tc  be  redundant.  The  redundant  units  are  not  turned  on  until  they  are  needed 
due  to  a  failure.  The  time  to  replace  or  switch  components  will  be  considered 
negligible  or  instantaneous  and  the  probability  of  a  switching  or  sensing  fail¬ 
ure  will  be  taken  to  be  zero. 

The  systems  will  be  composed  of  units  having  a  constant  failure  rate 
and  thus  having  an  exponential  failure  density  function.  The  mathematical 
models  for  repairable  systems  are  based  upon  a  constant  rate  of  repair. 

Thus,  the  probability  of  repair  during  a  particular  time  interval  will  also 
follow  an  exponential  distribution.  Repairs  on  failed  components  begin 
immediately  after  they  fail  and  upon  completion  of  repair  the  units  are 
immediately  returned  to  operation,'  if  needed,  or  to  the  standby  state.  A 


system  will  be  considefed  off  o*  in  f  - Jed  state  when  it  is  not  performing  . 
its  function  and  during  this  period  all  non-failed  components  will  be  turned 
off.  It  is  also  assumed  that  component  failures  only  occur  while  operating  i 
and  not  while  in  standby.  Thus,  uc  component  will  be  in  operation  unless  it 
is  operable  (nqt  failed)  and  is  nece.ssary  for  system  operation.  At  the  begin¬ 
ning  of  operatipn  all  units  are  either  operating  or  operable. 

1.  PROPERTIES  OF  THE  EXPONENTIAL  DISTRIBUTION  -  The  exponential  . 
or  Poisson  process  which  describes  the  random  failure  laws  for  electronic 
equipment  has  many  interesting  properties.  One  that  is  important  for  the 
discussion  to  follow  is  the  so-called  property  of  "lack  of  memory.  "  Basi¬ 
cally,  this  property  implies  that  the  reliability  of  a  system  obeying  this  pro-  , 
cess  is  not  dependent  on  the  length  of  time  the  system  or  any  of  its  compon-  , 
ents  has  been  operating  bvit  only  on  the  state  of  the  system  at  the  time  of 
interest.  Thus,  given  that  a  system  of  n  series  units  is  operating  at  time  t 
and  regardless  of  the  length  of  time  each  unit  has  been  operating,  the  proba¬ 
bility  that  the  system  survives  the  period  of  time  from  t  to  t  +  At,  for  any 
At,  is  the  same  as  the  probability  of  an  identical  new  system  being  turned  on 
and  operating  without  failure  for  time  At.  Also,  it  can  be  stated  that  if  the 
system  is  operating  at  time  t  its  expected  time  to  failure  measured  from  that  ! 
point  is  the  same  as  the  expected  time  to  failure  of  a  new  system  at  the  onset  I 
of  operation.  A  brief  proof  of  these  statements  will  now  be  given.  { 

Consider  n  units  where  the  operation  of  each  is  necessary  for  the  ^ 
system  to  function.  Let  each  unit  have  a  constant  failure  rate  X^i  i  *  1,  j  ' 
n.  Thus,  each  unit  has  a  failure  density  function  given  by  i  ' 

I 

f  (t)  =  X,  exp  (-X  .t)  (i) 

I  X  I 

and  a  probability  of  survival  (reliability) 

!  R.j(t)  =  exp  (-X^t) 

j 

where  the  units  are  new  when  put  into  oper^iicion  at  t  =  0, 
this  system  is 

R(t)  =  exp  (-  S  X^t) 

»  _  t  " 

and  its  failure  rate  is 


a 


and  thus  its  expected  time  to  failured  (measured  from  t  »  0)  or  MTBF  is 

n 

M»l/  I  X,.  (4) 


(2) 

The  reliability  of 

(3) 


Now  assume  that  a  syc.  ^  b  '.'.-n  r<mni".g  ;  vve  have  been  re¬ 

placing  failures  with  new  units.  .1  .>;ri  if  the  system  is  operating  at  time  t,  a 
situation  might  occur  where  the  ith  unit  was  put  into  the  system  new  at  time 
ti  where  0  <  ti  <  t  for  all  i  =  1 ,  .  .  .  ,  n.  At  time  t  the  ith  unit  will  have 
operated  for  a  period  of  t  -  ti  hours.  The  probability  that  a  unit  which  is 
new  at  tf  will  last  to  time  t  is  exp  [-  Xj  (t  -  tf)]  ,  and  the  probability  that 
all  units  (where  the  ith  is  new  at  ti)  will  operate  till  t  is 


R(t)  »  exp  [-  Xt  (t-ti)]  exp  t  -  3^2  3 

R(t)  a  exp 


R 


-  £  £.(t  - 

la  1 


exp  (  -Aq  (t  -  tn)  ]  (5) 


The  instantaneous  failure  rate  at  time  t,  given  that  the  system  is 
operating  then,  and  with  the  above  conditions  holding  is, 


h  (t)  = 


dt 


n 

I  X  . 

1  t 


(6) 


which  is  the  same  failure  rate  as  when  the  system  was  new.  Now,  the  prob¬ 
ability  of  the  system  failing  during  the  interval  t  to  T,  (T  >  t),  given  that  the 
system  is  operating  at  time  t,  is 


T 

G(T)  =  dt/R(t)  =  1  -  exp 


n 

I  X.  (T  -  t) 
i=l  ^ 


(7) 


It  is  important  to  note  that  the  if,  or  the  times  of  the  original  unit  failures 
and  replacements  no  longer  appear,  (the  system  is  independent  of  its  past 
failures).  Now,  letting  At  =  T-t  our  new  "starting"  time  is  T=tor  At  =  0 
and  the  probability  that  the  system  dees  not  fail  during  ti. -e  At  is  given  by 

f  ■*  '! 

R  (A  t)  =  exp  }  (-  S  X  .)  At  .  (8) 

‘  .J 

This  quantity  depends  only  on  the  time  interval  At  measured  from  the  point 
of  interest  t,  (when  the  system  was  operating)  and  is  independent  of  any  past 
failures  or  history.  Thus,  the  reliability  of  the  system  and  of  a  "new' 
system  are  the  same.  It  can  also  be  seen  that  the  expected  time  till  the. 
system  fails,  measured  from  time  t,  and  given  that  the  system  was  operat¬ 
ing  then  is 

R 

Ivf  =  1/  I  X, 
i=  i 

This  is  the  same  as  the  expected  time  to  failure  of  the  system  with  nev' 

components. 

It  has  previously  been  shown  (Ref.  A)  that  the  reliability  of  a 
system  requiring  one  unit  to  operate  and  having  k  units  in  standby  Is  given 
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by  the  Poisson  distribution  and  is  j 

I 

k  I 

R(t)  =  exp  (  -  Xt)  I  (Xt)  ^/ji  ,  (9)  I 

3=0 

I 

where  X  is  the  failure  rate  of  each  unit  and  only  one  unit  operates  at  any 
time.  The  mean-time-to-failure  of  such  a  system  is  k/ X  =  km  where  m  is 
the  MTBF  of  a  single  unit. 

2.  RELIABILITY  -  NON -REPAIRABLE  SYSTEM 

2.  1  The  Basic  System  -  Consider  three  identical  units  with  constant 
failure  rate  Xi  where  two  are  needed  for  system  operation  and  the  other  is 
in  standby  (spare).  The  spare  will  replace  either  of  the  first  two  units 
shotild  one  of  them  fail. 


Fig.  1  Basic  System 

The  system  begins  operation  with  units  A  and  B  operating  and  unit 
C  in  standby.  The  system  will  fail  when  two  units  have  failed.  The  system 
will  operate  successfully  till  time  t  if;  (1)  both  units  A  and  B  survive  till 
time  t,  or  (2)  one  of  the  units,  A  and  B  (say  B),  fails  at  time  ti  <  t  but  the 
remaining  unit  A  survives  till  t  and  unit  C  operates  for  a  period  t2  where 
ti  +  t2  =  t.  These  two  events,  both  insuring  success,  can  be  described  as 
operation  of  units  A  and  B  until  time  ti  when  one  unit  fails,  where  0  <  tj 
<  t,  and  successful  operation  of  the  non-failed  unit  and  the  spare  for  a 
period  of  time  t2»  where  0  <  t2  £  t  and  tj  +  The  possibility  of  both 

A  and  B  failing  at  exactly  the  same  linte  is  omitted  since  this  event  has 
probability  zero. 

The  reliability  of  the  system  frorc.  time  0  tc  time  tj  is  give.i  uy 

R-  (t,)  =  exp  (-2  Xt.y  where  0  <  t,  <  t.  (10) 

The  reliability  function  describing  the  system  when  e,  unit  has  failed  at  time 
ti  and  is  replaced  is 

R,(t2)  *  exp  (-2  X  t^)  where  0  £  t,  <  t  ,  t,  t  t^  -  t.  (11) 


Rl(tl)  18  juBt  the  reliability  of  2  a->iis  in  aeries.  R2(t2)  follows  from  the 
fact  that  at  time  t^  when  one  unit  fails,  the  non-failed  unit  has  a  probability 
of  survival  for  time  t2  of  exp  (-  X  t2)  which  is  the  same  as  that  of  the  spare 
unit.  The  corresponding  failure  d<msity  functions  are 

/,  (tj)  =  2  A  exp  (-2  A  tj),  0  <  t^  <  t  (12) 

and 

2  A  exp  (-2  A  t^),  0  <  tj  <  t^,  +  *2  = 

The  joint  density  function  for  failure  during  time  t  will  be 

,(t)=  <p(tj.  t^)  =  fj(tj)  f^lt^)  (14) 

since  the  probabilities  of  failure  in  either  time  interval  (ti  or  t2)  are 
independent.  Thus 

,(tj,  t^)  =  4  A^  exp  (-2  a  tj  -  2  A  t^), 

0  <  tj  <  t,  0  <  <  l.  t,  t  <2  =  t,  ■  (15) 

The  probability  of  system  failure  during  time  t  is  given  by: 

t  t-t- 

Q(t)  =  /  /  ,(t,,  tJ  dt,  dt_  (16) 

t-  =  0  t,  =  0  12  12 

M  1 

Or 

Q(t)  =  i  -  3xp  (-2  At)  -  2  At  exp  (-2  At).  (17) 

The  probability  of  system  survival  to  time  t  is 

il(t)  i  -  Q(t)  -  sxp  (-2\t'<:i2  At  exp  (-2  A  t).  (i8) 

This  result  may  be  arrived  at  m  a  purely  logical  manner  by  first 
considering  a  system  having  one  unit  operating  and  one  in  standby.  The 
reliability  of  that  system  :s  given  by  (9)  where  K  =  i.  Expression  (18)  may 
be  obtained  from  (9)  by  replacing  A  by  2  A.  This  follows  since  whenever  this 
system  is  operating  it  has  failure  rate  2  A  ,  while  the  other  system  has 
failure  rate  A  when  it  is  operating  and  the  standby  procedure  is  the  same. 

The  mean-time-to-sysiem  failure  (MTTF)  of  a  system  is  given  by 

(Ref.  B). 


M  = 


j  -  t  dt  =  /  R(t)  dt. 

o  o 


•  (19) 
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For  the  "basic"  system  it  becomes 


M  =  1/X  =  m,  (ZO) 

where  m  is  the  MTBF  of  a  single  unit.  The  MTTF  of  two  units  in  series 
without  a  spare  is  m/2,  and  by  using  only  one  spare  the  expected  life, of  the 
system  is  doubled.  Thus,  a  50%  increase  in  equipment  complexity  gives  a 
100%  increase  in  MTTF. 

A  commonly  used  redundant  system  is  shown  on  the  left  in  Figure  2. 
This  system  has  2  units  operating  till  one  of  them  fails  and  then  the  system 
operates  with  2  identical  units  which  are  in  standby.  The  system  on  the  right 
is  an  equivalent  system  with  regards  to  reliability  which  is  given  by  (9)  where 
the  failure  rate  is  2a  and  n  =  1. 


Fig.  2  Equivalent  Reliability 


Thus, 


Rit)  =  exp  (-2  A  t)  T  2  X  ;  exp  (-2  X  t) 

However,  this  system  only  has  the  same  reliability  as  the  "basic"  system 
which  performs  the  same  function  and  uses  only  3  units  instead  of  4.  This  is 
so  since  both  the  system  above  and  the  oasic  system  have  a  failure  rate  of 
2X  when  operating.  Thus,  by  using  what  may  be  a  slightly  more  complicated 
switching  system,  the  resulting  reliability  is  the  same  with  only  75%  of  the 
complexity 

The  reliability  of  the  3-unit  system  where  Xjjjt  Xc  C3.n  be 

obtained  in  a  similar  manner  using  joint  density  functions.  In  this  case,  the 
system  reliability  is 

R(t)  «  p^(t)  [  (tj)  X  P^  (t-tj)  3  +  (t)  [p^it^)  X  P  Jt-t^)]  (21} 

•  p^(t)  p^^t). 
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where  0  <  <  t,  0  <  t2  <  ii  ani?  where  Pfalti)  x  ?c(t-ti)  is  the  probability 

that  unit  i5  survives  for  time  t|  smci  umt  C  (the  spare}  lasts  from  tj  to  t, 
This  probability  is  given  by; 


Pb^i)  X  P^lt-tj)  -  1 


t-t. 


ti=0  tj.O 


Xfa  exp  (.  exp  (-  k^t^)  dt^dtj 


=  l/(  ■  ^b^  tXc  exp  (-  Xfat)  -  Xb  exp  (-  Ac*)  ^  (22) 

where  Pfjit)  =  exp  (-  X^jt)  etc.  The  third  term  in  (21)  accounts  for  the  possi¬ 
bility  that  both  units  A  and  B  last  till  time  t.  After  evaluating  Pa(i2)  ^  ^c  (^~^2) 
the  system  reliability  becomes 


iR(t)  =  [X  /(  X^  -  XJ  +  X  /(  A  -  X J)  exp  [.(  X  +  Xjtj 

CCDCCa  StO 

+  [X,  /( X,  -  X  )]  exp  [  -(  X  +  X  )t] 
b  D  c  a  c 

+  [X  /(X  -  X  )]  exp  f -(X  +  X  )t]  -exp  [-(X  +  X  )t]  (23) 

a  ac  be  *^  ab 

It  can  be  shown  that  it  does  not  matter  which  unit  is  used  as  the  spare. 

j 

2.  2  n  Units  in  Series  With  One  Spare  ; 

, 

The  results  and  techniques  of  the  previous  sectio.*  can  be  generalized’ 
to  the  case  of  n  identical  units  functioning  in  series  with  another  unit  as  a 
spare.  Again,  the  lack  of  memory  property,  which  spates  that  at  time  t, 
when  the  first  failure  occurs  the  remaining  h-i  operating  units  behave  as 
though  they  are  all  new,  is  the  main  point  in  the  development.  In  this  case 
whenever  the  system  is  operating  it  has  failure  rate  nX  .  The  failure 
density  functions  are: 

fj(tj)  =  n  X  exp  (-nX  t^),  ~  (-nX  t^) 

( 

where 


0  <  *1  <  t,  0  <  <  t,  and  f  t^  =  t. 

Proceeding  as  before  the  reliability  of  this  n  t  i  unit  system  is  given  by 

R(t)  =  exp  (-nX  t)  il  +  nXt]  .  (24) 

The  system  MTTF  will  be 

M  a  2/nX  =  2m/n;  (25) 

where  m  is  the  MTBF  of  a  single  unit  and  n  is  the  number  of  units  in  sefies. 
Without  a  spare  the  expected  time  to  failure  would  be  m/n  and  by  using  only 
one  spare  for  n  units  the  expected  life  of  the  system  can  be  doubled. 

2.  3  n  Units  in  Series  with  K  Spares 

The  reliability  of  a  system  with  n  a  1  and  k  spares  in  standby  is 
given  by  (9)  and  the  reliability  for  n  units  in  series  and  1  spare  is  given  by 
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(24).  The  general  result  can  be  obtained  by  considering  these  equatiohs. 
The  system  is  shown  in  Figure  3. 


n  UNITS 


[t]--|3- r -O-Q 

b' 


>k  SPARES 


m 


Fig.  3  n  Units  in  Series  with  k  Spares 


In  this  system,  whenever  a  failure  occur s,  the  failed  unit  is  re¬ 
placed  by  a  spare.  Thus,  it  is  necessary  that  k+1  units  fail  before  the 
system  will  fail.  At  the  time  of  any  failure  the  surviving  units  are  as  good 
as  new.  At  any  time  the  system  is  operating  it  has  a  failure  rate  of  nA 
and  its  probability  of  survival  for  a  period  T  from  that  time  is  exp  (-nAT). 
The  reliability  for  this  system  can  be  found  by  obtaining  the  joint  density 
function  of  the  k  variables  tj,  t2,  .  •  . ,  tj^  such  that  tl  +  t2  +  .  .  .  +  tj^  =  t. 

The  t^  are  the  failure  times  for  the  k  failures  which  can  occur  without 
causing  the  system  to  fail.  Once  the  joint  density  function  is  obtained  R(t) 
can  be  derived  by  k  integrations  of  the  type  done  in  section  2.  1,  However, 
the  result  is  obtained  directly,  in  view  of  the  previous  discussions,  by  re¬ 
placing  A  by  nA  in  (9).  The  reliability  of  this  n  +  k  urit  system  is  given  by: 

k 

R{t)  =  1  (nAt)j/ji  [exp(-nAt)].  (26) 

j=  o 


The  expected  time  to  system  failure  will  be 

M  =  k/nA  =  km/n.  (27) 

which  is  k  times  the  MTTF  of  n  units  in  series  without  any  standby  units 
Thus,  the  addition  of  each  spare  increases  the  MTTF  by  m/n. 

3.  Reliability  of  Some  Repairable  Systems 

In  some  redundant  systems  it  is  possible  to  repair  a  failed  unit 
while  the  redundant  or  spare  unit  is  operating.  If  repairs  are  completed 
before  the  redundant  unit  fails  the  system  is  restored  to  its  initial  state 
and  will  be  as  good  as  a  new  system.  The  system  may  be  kept  operating 
for  a  comparatively  long  time  if  the  repair  rates  are  high  enough.  The 
systems  considered  will  have  components  having  constant  failure  rate  X 
and  constant  repair  rate  u. 
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3.  1  The  Basic  System 


The  system  in  Figure  1  wj!h  the  addition  of  repair  capability  is 
considered  firei.  Units  A  and  B  operate  until  one  of  them  fails  at  which 
time  it  is  replacea  Ijy  the  ppare  and  repairs  are  begun  on  the  failed  unit. 
This  process  continues  until  two  units  are  simultaneously  failed  and  thus 
the  system  has  failed.  The  spare  tmit  only  operates  when  it  is  necessary 
for  system  operation.  We  are  interested  in  the  probability  of  system  sur¬ 
vival  (no  system  failure)  till  time  t. 

At  any  particular  time  the  system  can  be  in  one  of  only  3  possible 
"states.  '  These  states  shall  be  defined  as  follows: 

State  2  -  two  units  are  operating  and  a  good  unit  is  in  steuidby, 

State  1  -  two  units  are  operating  and  the  third  has  failed  and  is  being 
repaired, 

State  0  -  two  units,  and  thus  the  system,  have  failed. 

After  the  system  has  been  operating  for  a  while  the  3  units  will  lose  their 
identity  and  the  system  will  have  undergone  a  number  of  transitions  between 
the  various  states.  One  the  system  enters  state  0  it  remains  in  that  state. 
Difference  equations  will  be  used  to  obtain  the  mathematical  model  describ¬ 
ing  these  transitions. 

^  Let  (t),  i  =  0,  1,  2,  be  the  probability  that  the  system  is  in 

'  state  i  at  time  t.  When  the  system  is  operating,  it  has  a  failure  rate  of 
2X  and  the  probability  of  one  of  the  two  units  failing  in  a  small  interval  At. 
is  2X  At.  The  probability  of  a  unit  coming  out  of  repair  is  \aAt.  The 
second  order  terms  in  A  t  (i.  e.  ,  terms  of  the  form  h  (At)  such  that  h/At 

0  as  At  -*0)  are  neglected  and  thus  the  possibility  of  a  ’onit  both  failing 
""  and  being  repaired  in  At  is  neglected. 

To  be  in  state  2  at  time  t  i-At  the  system  couid  have  been  in  state 
2  at  time  t  and  did  not  experience  any  failures  during  At,  or  it  could  have 
been  in  state  1  at  time  t  and  the  failed  unit  came  out  of  repair  during  4t 
while  neither  of  the  operating  units  failed.  To  be  in  state  1  at  t  +  At  the 
system  could  have  been  in  state  2  at  t  and  had  one  unit  fail  during  At  or  it 
could  have  been  in  state  1  at  time  t  and  experienced  neither  a  failure  or 
•  repair  during  At.  Neither  state  2  nor  state  1  can  be  reached  from  state  0 
once  that  state  is  reached  the  system  has  failed.  To  be  in  state  0  at  t  +  A  t 
I  the  system  could  have  been  in  state  2  at  time  t  and  suffered  two  failures, 

I  the  probability  of  which  is  a  2nd  order  term  in  At  and  will  be  neglected,  or 
it  could  have  been  in  state  1  at  time  t  and  suffered  a  failure  during  At  while 
no  repairs  were  completed,  or  it  could  have  been  in  state  0  at  t  with  nothing 
,  more  happening. 
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The  system  will  be  operating  if  it  is  in  state  2  or  state  1  and  the 
system  reliability  is  given  by; 

mi)  =  p,{t)  +  Pi(t)  =  1  -  Po(t) 

where  Po(t)  +  Pli*)  +  ^2^^)  * 

If  all  components  are  initialiy  in  good  condition  the  Initial  conditions  are 

Po(0)  -  Pi(0)  *  C  P2{0)  »  1. 

The  difference  equations  describing  the  transitions  are: 

P2(t+At)  »  P2(t)  {1-2  XAt)  +  Pi(t)  u  at(l-2  X4t)  (29a) 

Pj(t+  At)  =  P2(t)  (?.  XAt)  +  Pj(t)  (1-u  At)  (1-2  XAt)  (29b) 

Po(t  +  At)  =  Pi(t)  (1-uAt)  (2XAt)  +  Po(t).  {29c) 

Now  subtract  P2(t)  from  both  sides  of  (a),  divide  both  sides  by  At,  and  take 
V  the  limit  asAt^  0  (and  perform  similar  operations  on  (b)  and  (c))  and  the 
following  differential  equations  result: 

dP2(t) 


=-2X  P2(t)  +  uPi{t) 

(30a) 

dPi(t) 

-  =  2X  P2(t)-{2X  Tu)Pj(t) 

dt 

(  5 Ob', 

dPo(t) 

=  2X  Pi(t). 

{30c) 

It  should  be  noted  that  the  omission  of  second  order  lerms  in  At  was  not 
really  necessary  as  they  would  have  disappeared  as  a  result  of  the  limiting 
process. 

The  differential  equations  can  be  solved  by  the  use  of  Laplace 
transforms.  Let  the  Laplace  transform  of  P|(t)  *  Pi(B)  and  that  of  R(t)  = 
r(8).  The  transform  of  dP^(t)/dt  is  given  by;  spi(s}  -  Pi(0).  Thus 

r(8)  *  P  1(8)  +  P2(s) 

(3!) 

-upi(8)  +  (8  +  2X)  P2{s)  ■  1 

(32a) 

(s  +  22  +  u)  Pj(8)  -  2X  P2(»)  ■  0. 
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{32b) 

s  +  2X  +  u 


Solving  for  pj  (s)  and  P2  (s)  gives: 

pj  (s)  - - ^ - ,  P2  (s)  = 

+  (4X  +  u)  B  +  4X^  +  (4X  +  u)  8  +  4X  ^ 

and  thus, 

3  +  4x+  u 

r  (a)  =  - - -  • 

9^  +  (4X  +  u)  8  f  4X  2 

R(t)  can  be  found  after  some  algebraic  manipulations  and  with  a  table  of 
inverse  Laplace  transforms  to  be 

R  (t)  =  1/  (a-b)  [a  exp  (-bt)  -b  exp  (-at)]  ,  (35) 

whe re  a  =  (4X+u)  +  (8uX+u^)^  and  b  =  (4X  +  u)  -  (8uX  4  u^)^ 

2  '  ~  2 

This  result  could  have  been  obtained  upon  consideration  of  the 
reliability  of  a  2  unit  system  where  one  unit  operates  and  one  is  in  standby 
(ref.  c).  By  replacing  X  by  2 X  in  the  reliability  function  for  the  2  unit  sys¬ 
tem  the  formula  for  reliability  of  the  3  tinit  system,  which  has  two  units 
operating  and  one  in  standby#  can  be  obtained.  This  would  be  a  logical  con¬ 
clusion  even  without  the  above  mathematical  derivation.  At  any  time  the 
3  unit  system  is  operating  it  has  failure  rate  2X,  rather  thanXfor  the  2 
unit  system  and  no  more  than  one  unit  can  be  in  a  failed  state  at  any  time 
for  either  system. 

The  MTTF  of  the  3  unit  system  is  given  by 

00 

M  -  R(t)dt  =  1/X  V  u/4  -  m  r  m^/4r  (36) 

o 

where  m  -  i/X  is  the  MTBF  of  each  unit  and  r  -  1/u  is  the  average  time 
to  repair  a  single  unit.  Comparison  of  this  result  with  that  for  the  same 
system  without  repair  capabilities  shows  that  repeiir  increases  the  MTTJ 
by  m2/4r.  The  increase  in  MTTF  due  to  both  redundancy  and  repair  is 
m/2  m2/4r. 

3.  2  N  Units  in  Series  -  One  Spare 

For  a  system  with  n  identical  and  repairable  units  in  series  arm 
one  in  standby  there  can  be  no  more  than  one  unit  in  a  failed  state  at  any 
time  since  n  units  are  needed  for  operation.  If  two  units  are  simultaneously 
in  a  failed  state  the  system  is  said  to  have  failed.  Whenever  this  system  is 
operating  it  will  have  failure  rate  nX.  At  most  one  unit  is  being  repaired 
at  any  time  the  system  is  operating.  Again  there  will  only  be  three  possible 
states  for  the  system;  state\2,  n  units  operating  and  an  operable  spare; 


(33) 


(34) 
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state  1,  n  units  operating  and  one  in  a  failed  state;  state  0,  two  units  and 
thus  the  system  has  failed.  The  mathematical  formulation  of  the  difference 
equations  is  identical  with  that  given  above  for  a  system  with  two  units  in 
series  and  one  spare.  All  that  need  be  done  is  replace  Z\  by  n^  in  the 
difference  equations  (29).  The  reliability  of  the  n  4*  1  unit  system  is 
I 

R(t)  =  !/(a-b)  [a  exp(<-bt)  -b  exp(-at)]  (36) 

Where  (2nX  +  u)  +  (4unX  (2nX  +  u)  -(4unX  +  u^J 

a  - - ^  and  b  - - . 

Inspection  of  a  and  b  shows  they  are  both  positive  so  that  R(®)  »  0. 

The  mean  time  to  system  failure  is 

M  =  2m/n  +  m^/n^  r  (37) 

The  MTTF  for  a  system  of  n  units  in  series  is  m/n,  for  the  same  system 
v.-ith  k  spares  and  no  repair  it  is  km/n,  and  with  repair  it  becomes,  (  1  spare), 
(2m/n)  +  (m^/n^r).  Thus,  an  increase  in  reliability  can  either  be 
achieved  by  increasing  the  amount  of  redundancy  or  by  designing  the  system 
so  that  failed  units  can  be  repaired  while  the  standbys  are  in  use.  The 
method  employed  depends  on  the  type  of  system,  weight  and  space  require¬ 
ments  and  the  feasibility  of  making  repairs. 

4.  Availability  of  Some  Repairable  Systems 

In  some  systems  continuous  operation  may  be  desired  but  not  man¬ 
datory.  If  the  system  is  off  due  to  a  failure  it  may  be  repaired  and  restored 
to  operation.  What  is  usually  important  in  this  case  is  the  percentage  of 
time  the  system  is  operating  and  the  probability  of  the  system  being  opera¬ 
tional  at  a  particular  time. 

4.  1  The  Basic  System 

A  3  unit  system  with  2  units  operating  and  one  spare  is  considered 
as  the  basic  system.  The  probability  A(t)  that  the  system  is  operating  at 
time  t  regardless  of  past  system  failures  or  repairs  is  desired.  When  two 
Units,  and  thus  the  system,  are  in  a  failed  state  the  third  unit  is  turned  off 
so  there  are  never  more  than  two  units  in  a  failed  state  at  any  time.  The 
three  possible  system  states  are: 

State  2  -  two  units  are  operating  and  the  other  is  operable, 

State  i  -  two  units  are  operating  and  the  other  is  being  repaired. 

State  0  -  no  units  are  operating,  but  one  is  operable 
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If  two  units  are  operating  the  pr-  .;b*j)'v  of  one  of  them  failing  in  &  t  is 
2  X  A  t;  similarly  if  two  units  are  fail-.d  the  probability  of  repairing  one  of 
them  in  At  is  2  uAt  while  if  only  one  is  failed  the  probability  of  repairing 
it  in  At  is  uAt.  The  difference  equations  describing  the  possible  trans¬ 
itions  (neglecjting  some  2nd  order  terms  in  At)  are: 

I 

P2  (t  +  At)  =  (t)  (1-2  XAt)  +  Pj  (t)  (i-2XAt)  UAt  (38a) 

Pi  (t  +  At)  =  P2  (t)  (2XAt)  +  Pi  (t)  (l-2xAt)  (1-uAt)  +  Po(t)  (2uAt)  (38b) 

Pq  (t +At)  =  Pj  (t)  (2XAt)  (l-uAt)  +  Pq  (t)  (l-2uAt).  (38c) 

Performing  the  same  type  of  limiting  process  as  before  the  following  dif¬ 
ferential  equations  are  obtained: 

dP,  (t) 

-  n  .2XP2  (t)  +  uPi(t)  (39a) 


dPi(t) 

-  =  2XP2(t)  -  (u  +  2X)  Pj  (t)  +  2uPQ(t)  (39b) 


dPo(t) 

2XPi(t)  -  2uPQ(t).  (39c) 


The  system  will  be  available  if  it  is  either  in  state  2  or  state  1. 
Thus,  system  availability  is  given  by: 


A(t)  =  P2(t)  +  Pi(t)  r  l-Po(t), 

(40) 

where 

Po(t)  +  Pi(t)  +  P2(t)  =  1. 

(41) 

and 

Pq(0)  =  Pj  (0)  =  0,  P2(0)  =  1. 

Using  Laplace  transforms  where  L  [  P-  (t)  ]  =  Pi(8), 

gives  the  following  set  of  equations: 

1=0,  1 ,  2 

^s  -  2X)  P7(s)  -  upj(s)  -  ' 

‘:42a) 

-2Xp2(8)  +  \  s  T  u  T  2X;  pj(s';  -  2  •apjj(s)  =  0 

{42b) 

-ZXpj  (s)  T  (s  +  2u)  pp  (s)  -  0. 

{42c) 

Solving  for  p^  (s)  by  determinants  gives; 

Po(«)  = _ ia! _ 

s  [  8^  +  s  (3u  +  4X)  ir(4x^  +  4Xu  +  2u^)  ] 
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The  inverse  transform  is  found  to  be; 


Po(t) 


4X  ^ 


4>> 


4X  ^  ^  +  4X  u  ab(a-b) 


[b  exp(at/  -  a  exp(bt)  ] 


The  system  availability  is; 

4Xu  +  2 


A(t)  » 


4X' 


4X  ^  +  4Xu  +  2  ab  (a-b) 


[  a  6xp(bt)  -  b  exp(at)  ]  (431 


where; 


a  =  [-(4X  +  3  u)  +  (u2  +  8  Xu)^^^  ]  /2 


and 


b  =  [-(4X  +  3  u)  -  {u2  +  8  Xu)^^^j  /2  , 


This  result  for  the  three  unit  system  (two  operating  and  one  spare 
is  the  same  as  would  be  obtained  by  substituting  2X  for  X  in  the  expression 
for  availability  (ref.  D).  The  limiting  or  steady  state  availability,  A, 
(sometimes  called  efficiency)  is  the  value  of  A(t)  as  t  approaches  infinity. 
Since  a  and  b  are  both  positive  quantities  A  becomes: 


A  s 


4Xu  +  2u^ 


4  mr  +  2m^ 


4x2  +  4Xu+2u^  4r^+4mr  +  2m2 


(44) 


where  r  =  1/u  is  the  average  time  to  repair  a  single  unit.  If  m  =  lOr, 
which  is  conservative,  then  A  =  60/61.  For  two  units  in  series,  without 
a  spare,  the  corresponding  availability  would  only  be  (m/m  +  2r)  =  5/6. 


4.2  n  Units  in  Series  -  One  Spare 

The  techniques  and  results  of  the  previous  sec:ion  can  be  gener¬ 
alized.  The  availability  of  a  system  consisting  of  n  units  operating  in 
series  with  one  spare  can  be  obtained  by  replacing  2  X  by  nX  in  expression 
(43),  Hence: 

...  2n  Xu  +  2u.^  ,  X^  r  ,  ,  ,, 

A(t)  s — - - - -  -  [a  exp(bt)  -  b  exp(at)] 

X  2  +  2u^  +  2nXu  ab  (a-b)  ( ]  S;, 


where 


a  a 


-(2nX+  3u)  + 


(u^  +  4nAu)^^^,  .  -(2nXv  3u)  -(u  + 


o  -* 


4nX  u) 


1/2 


The  limiting  availability  is 


A 


2n  Xu  +  2u^ 

X^  +  2u  +  2nXu 


2nmr  t  2m 
n^r^  +  2m  ^  +  2nmr 
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The  lii.uting  availability  of  n  ficrifa  i-oi's  v/ithout  a  is  u/  (u  +  nA).  If 

u  =  10  X  and  n  =  10  then  the  addition  of  the  spare  gives  1.  6  times  the  availa¬ 
bility  of  a  non-spared  system. 

CONCLUSIONS 

It  is  generally  believea  that  the  application  of  redundancy  in  elec¬ 
tronic  equipment  will  at  least  double  its  size  and  weight.  In  practice,  how¬ 
ever,  many  sub-assemblies  or  unite  are  found  to  be  identical  in  complex 
electronic  equipment.  For  these  cases  this  paper  has  shown  that  standby 
redundancy  can  be  judiciously  employed  to  achieve  a  high  degree  of  relia¬ 
bility  and  availabilit;  witl  nat  the  penalty  of  drastically  increasing  size  and 
weight.  A  typical  example  may  be  found  in  digital  to  analog  conversion 
equipment.  In  such  systenis  many  circuits  or  channels  are  repeated  in 
order  to  handle  all  the  signals  involved.  By  providing  extra  channels  in 
standby  the  reliability  and  availability  of  the  equipment  Ceui  be  greatly  en¬ 
hanced.  Similar  applications  can  be  found  in  digital  computer  equipment. 

In  effect,  this  provides  an  efficient  means  of  making  trade-offs  between 
system  reliability  and  complexity. 

The  following  chart  summarizes  the  results  of  this  paper. 


Series 

Units 

Standby 

Units 

Repair 

Reliability 

(MTTF) 

Availability  (A) 

2 

0 

no 

m/ 2 

<•( 

2 

1 

no 

m 

■X 

n 

0 

no 

m/n 

n 

1 

no 

2m/n 

V 

n 

;< 

nc 

km/n 

2 

0 

yes 

m/2 

m/(m  2r) 

2 

- 

ves 

m  +m^/ 4r 

(4  rnr  +  2m^)/{4  mr  -f  4r^-i-2m‘^) 

n 

n 

\J 

yes 

m/  n 

m/(m  T  nr) 

n 

1 

yes 

2m/n  +m^/n^r 

( 2nmr  +2  m^)/(n^  +  2m^  +  2  nmr 

MTTF  =  Mean  Time  to  First  System  Failure 
A  =  Steady  State  Availability  or  efficiency 
m  =  MTBF  of  each  component 
T  ~  Average  time  to  repair  a  component 

*  The  availability  of  a  non -repairable  system  is  essentially  zero  sinc.^. 
once  it  falls  the  system  remains  in  a  failed  state. 
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SUMMARY 

Weapon  system  effectiveness  may  be  defined  as  the  ratio  of  the  sta¬ 
tistically  determined  probable  number  of  target  area  hits  to  the  maximum 
possible  number  of  target  area  hits,  within  a  specified  time  after  a  com¬ 
mand  to  fire  has  been  issued,  for  a  system  operating  in  a  prescribed  man¬ 
ner  with  a  specified  maintenance  policy. 

Weapons  system  effectiveness  is  optimized  by  "trading-off"  between 
the  constituent  reliability,  maintainability  and  accuracy  parameters  of  the 
system.  A  most  important  relationship  and  vehicle  for  this  optimization 
is  the  availability  ratio.  It  is  within  this  ratio  that  the  analytic  model  re¬ 
lating  maintenance  and  reliability  is  established. 

In  this  paper,  a  derivation  of  a  probabilistic  model  for  a  relatively 
uncomplicated,  but  nevertheless  realistic,  electronic  weapon  system  is 
presented  with  emphasis  on  the  basic  mathematical  techniques  involved. 
The  resulting  model  is  then  discussed  in  the  light  of  its  role  as  a  major 
factor  in  the  determination  of  weapon  system  effectiveness  and  a  practical 
approach  to  an  estimate  of  mean-time-to-repair  is  presented. 

A  method  for  optimizing  the  effectiveness  is  then  discussed  for  the 
conditions  when  system  accuracy  is  independent  of  time,  and  when  system 
accuracy  is  a  function  of  time  between  data  inputs  or  calibrations. 
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INTRODUCTION 


The  success  of  any  electronic  weapons  system  is  reflected  in: 

.  first,  its  ability  to  react  successfully  within  an  allowable  time 
limit  from  a  command-to-fire,  and 

.  second,  its  ability  to  control  the  accuracy  of  the  weapon,  with 
a  given  probability  of  operating  to  within  a  specified  system  "error,  " 
or  "miss -distance.  " 

A  major  parameter  in  determining  a  system's  ability  to  react  suc¬ 
cessfully  is  its  "availability,"  or  state  of  readiness,  when  the  command- 
to-fire  is  given,  where  Bystem  availability,  or  readiness  probability,  is 
the  ratio  of  the  average  time  spent  in  a  "ready"  and/or  "near-ready" 
state  to  the  total  average  system  time,  over  an  operational  maintenance 
cycle.  Consequently,  it  is  not  only  necessary  to  consider  the  reliability 
and  accuracy  of  the  equipment  in  optimizing  system  effectiveness  but  its 
maintainability  as  well,  since  such  parameters  as  mean -time -to -repair 
(or  replace)  contribute  significantly  in  the  determination  of  an  availability 
ratio. 


Projection  of  the  effectiveness  of  an  electronic  weapon  system, 
therefore,  involves  the  joint  consideration  of  the  system's  availability, 
the  probability  of  its  successful  survival  throughout  the  period  of  time  re¬ 
quired  to  complete  its  mission,  and  the  probability  of  operating  to  within 
specified  accuracy  limits. 

System  effectiveness  is  optimized  by  "trading-off"  between  the  con¬ 
stituent  parameters  of  the  system.  Since  these  reliability,  maintainability, 
and  accuracy  factors  are  implicitly  established  by  many  of  the  early  de¬ 
sign  and  development  decisions  involved  in  specifying  a  system,  including 
such  considerations  as  circuit  derating,  parts  procurement  levels,  and 
field  maintenance  philosophy,  the  establishment  of  a  system  effectiveness 
model  permits  optimization  of  this  characteristic. 
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SYSTEM  AVAILABILITY  CONCEPTS 


The  availability  of  a  system  is  described  as  the  probability  of  having 
a  system  in  an  operating  condition  and  in  a  ready  state  when  a  demand  is 
made.  If  the  condition  of  ope  rationality  is  modified  to  assume  that  the 
probabilities  of  having  undetectable  failures  and  large  error  accuracy 
degradations  are  negligible  and  that  the  system  is  always  unavailable 
while  undergoing  a  replacement -type  repair  or  an  interrogation,  then  a 
reasonable  approximation  of  the  availability  model  can  be  derived. 

a.  Basic  Requirement 


One  of  the  most  important  requirements  on  which  the  following 
analysis  is  based,  is  that  the  failure  rate  of  the  system  is  constant. 
Essentially,  this  means  that  the  times -between -failure  of  the  system  are 
exponentially  distributed.  For  the  system  under  discussion  it  has  been 
statistically  determined  from  field  operating  time  and  failure  data  that 
the  failure  rate  is  constant. 

b.  Transition  Probability  Transients 

It  can  be  shown  for  the  system  under  analysis  that  the  transient 
effects  of  starting  a  new  system  soon  die  down  and  the  transition  probabil¬ 
ities  become  constant  after  a  relatively  short  number  of  standby  interro¬ 
gation  cycles  via  the  technique  of  the  Markov  chain  applied  to  an  ergodic 
process.  However,  another  explaination  from  the  physical  (or  intuitive) 
point  of  view  will  be  made  in  the  following  section  when  the  system  equa¬ 
tions  are  derived. 
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DERIVATION  OF  A  SYSTEM  AVAILABILITY  MODEL 


a.  Definition  of  System  Availability 


By  definition  of  A  we  can  write  the  following  ratio: 


[^Expected  (or  avg. )  total  time  that  a  system 
is  operational  (working)  and  ready  (known  to 
,  be  working)] 


Total  time  in  use 


3 


(1)  The  above  expression  for  A  is  simply  the  statistical 
definition  of  probability  which  states  that  the  probability  that  an  state  will 
occur  is  the  total  time  the  state  does  occur  over  the  amount  of  time  that 
all  possible  states  occur. 


b.  Interrogation  System 

The  basis  for  determining  whether  a  system  is  good  is  the 
interrogation  system. 

(1)  For  the  perfect  interrogation  system  it  is  known  at  the  end 
of  the  interrogation  whether  the  system  is  ready  to  enter  the  next  standby 
period  in  working  order  or  the  system  requires  maintenance  action. 

(2)  If  the  interrogation  system  is  less  than  perfect,  then  there 
is  a  probability  designated  as  "a"  that  the  interrogation  system  will  call  a 
working  or  good  system  bad  (i.  e.  ;  a  false  alarm  probability  exists)  and  a 
probability  (1-d )  that  it  will  accept  a  nonworking  or  failed  system  as  being 
good.  It  follows,  that  "d"  is  the  probability  of  detecting  a  "failed"  system. 

S  t 

c.  Determining  the  Probability  of  a  System  Entering  the  (n+1) 

Cycle  in  a  Working  or  "Good"  Condition 


The  first  quantity  required  in  the  derivation  of  an  availability 
model  is  the  probability  that  a  system  will  enter  an  interrogation  in  a  good 
and  ready  condition.  This  follows  from  the  definition  of  the  Availability 
ratio  which  is  the  total  time  a  system  is  good  and  ready  over  the  total  time 
the  system  exists. 

(1)  A  cycle  is  defined  as  the  total  time  span  between  the  start 
of  succeeding  scheduled  equipment  interrogations,  symbolized  as  T. 

(2)  The  following  boundary  conditions  were  used  to  generate 
this  model  in  order  to  simplify  its  form  and  promote  the  understanding 
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of  the  technique. 


(a)  All  repairs  are  perfect. 


(b)  After  a  repair  has  been  made  another  interrogation 
is  performed,  but  no  more  than  two  interrogations  are  performed  during 
any  one  cycle.*  Tj  and  Tj.  are  the  times  to  interrogate  and  repair,  respec¬ 
tively. 


(c)  A  system  failure  can  occur  during  any  interrogation, 
but  as  limited  in  the  preceding  ground  rule,  the  second  consecutive  repair 
of  the  system  will  not  be  interrogated.  This  rule  is  also  applicable  to  re¬ 
pairs  fostered  by  one  or  more  false  alarms. 


(d)  The  system  failure  rates  in  the  standby  portion  of  the 
cycle  are  considerably  lower  than  the  system  failure  rates  in  the  interro¬ 
gation  portion  of  the  cycle J 

(e)  The  time  spent  in  standby  is  considerably  longer 
than  the  sum  of  the  times  required  to  effect  two  repairs  and  conduct  two 
interrogations. 


(f)  Means  are  not  available  to  determine  if  a  system  is 
working  while  in  standby. 

S  t 

(3)  The  probability  of  entering  (n+1)  cycle  both  good  (work¬ 
ing)  and  ready  (  known  working)  is  schematically  represented  by  the  flow 
diagrams  of  figures  (1)  and  (2). 

(a)  Figure  (1)  shows  the  flow  of  all  possible  states  the 
equipment  can  take  while  entering  good  and  leaving  good.  For  simplicity 
all  of  the  transition  states  which  would  allow  the  equipment  to  enter  the 
next  cycle  bad  have  been  left  out. 

(b)  Figure  (2)  shows  the  flow  of  all  possible  states  th 
equipment  can  take  while  entering  bad  (not  working)  and  leaving  good. 

(c)  The  transition  probabilities  for  state-to-state 
traverse  are  shown  and  these  factors  will  be  combined  to  derive  the  sys¬ 
tem  equation.  It  should  be  noted  that  the  probability  of  effecting  a  repair 
p[mJ  is  unity  as  stated  in  the  ground  rules.  A  good  system  (working) 
known  to  be  good  is  represented  by  Gq  and  a  good  system  thought  to  be  bad 
(nonworking)  is  represented  by  Gb-  a  bad  system  known  to  be  bad  is  Bg. 

*  For  a  practical  model  the  number  of  interrogations  allowed  per  cycle 
can  be  quite  large,  but  a  decision  will  have  to  be  made  as  to  when  the 
next  cycle  must  start. 
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FLOW  DIAGRAM  -  ENTER  CYCLE  GOOD,  LEAVE  CYCLE  GOOD 


cl^[T-(ZTK-»-^Tr)] 
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FLOW  DIAGRAM  -  ENTER  CYCLE  BAD,  LEAVE  CYCLE  GOOD 


(4)  The  probability  of  entering  the(n+])P*  cycle  good  is: 


Pa-tn^  d  (\-  1  + 

%tr>'ia.€^'^’'C\-<x)e’^'^'-  ’■  + 

f-p,w)d  o-o-^e"-^v^  + 

0-p,4do.e"-"^e^'tr  \-t; 


(a)  Obviously  it  is  seen  that  each  term  is  merely  the 
product  of  the  individual  transition  probabilities  (which  are  independent) 
and  the  sum  of  all  of  the  transitions  which  result  in  a  working  system  at 
the  start  of  the  (n+1)®*  cycle.  Pq  is  the  probability  of  being  good. 

(b)  If  we  note  that  the  entire  weapon  system  and  its 
maintenance -reliability  performance  is  a  random  process  and  also  note 
that  we  have  constant  failure  rates  and  that  the  time  to  repair  a  system 
is  an  overall  weapon  system  average,  then  it  is  reasonable  to  expect  the 
ensemble  (or  statistical)  average  probability  of  being  good  is  equal  to  the 
single  (or  time)  system  average  probability  of  being  good.  This,  of  course, 
is  the  definition  of  an  ergodlc  random  process  and  me2uis  that  the  transi¬ 
tion  probabilities  stabilize  after  a  finite  number  of  transitions.  For  this 
system  it  can  be  verified  using  Markov  chains  that  the  probabilities 
stabilize  after  a  few  transitions. 


(c)  In  relating  the  preceding  discussion  to  the  derivation 
of  &n  expression  for  entering  the  (n+1)®^  cycle  in  a  working  condition  we 
have  reasoned  that  the  trauisition  probability  between  cycles  is  equal,  hence 
the  relationship  between  PQ(n-fl)  and  PQ(n)  is: 

”  Pg(”)>  '^here  n»3. 

The  expression  in  sub -section  4)  can  now  be  algebraically  solved  for  PQ(n). 
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(d)  The  probability  that  a  system  is  good  is; 


^  ^rr-CTy+nK.')lj 

- 

(\-(x)-i-ci  g^cTx.-vTv') 

d.  System  Availability 

The  system  availability  for  this  particular  system  is  the  sum  of 
the  average  time  spent  in  a  working  condition  in  standby  over  the  average 
time/cycle  which  is  T.  An  expression  for  the  expected  or  average  good 
standby  time /cycle  must  now  be  derived; 

(1)  Derivation  of  anExpression  for  the  Average  Good  Standby 
Time /Cycle. 


(a)  There  are  two  possible  ways  a  system  which  enters 
a  standby  period  in  a  working  or  good  condition  can  end  the  stamdby  period; 


The  system  can  fail  before  the  period  is  com¬ 
plete  and  the  average  working  time  given  that  the  system  will  fail  and  the 
distribution  of  times -to-failure  for  the  system  is  exponential  is; 


2_.  The  system  will  survive  the  standby  period: 

Ts,=  Ts 

^  The  probabilities  that  a  system  will  survive  or 
fail  during  the  standby  period  are: 

P[S>U.YVIV£.|]= 

^  Now  it  follows  that  the  average  good  time  is; 

-V-  pfeoorvwa.Q'^,^ 
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(b)  The  used  in  this  derivation  is  only  a  variable  of 
Integration  since  there  are  several  standby  periods  possible  due  to  the  fact 
that  all  repairs  and  subsequent  interrogations  after  the  first  scheduled  in¬ 
terrogation  reduce  the  effective  length  of  the  standby  period.  Incidentally, 
it  directly  reduces  the  availability  as  will  be  seen  in  the  ensuing  derivation 

(c)  The  expression  for  the  availability  ratio  is  merely 
the  sum  of  the  average  good  time  for  each  different  length  of  standby  per¬ 
iod,  multiplied  by  the  probability  of  entering  that  particular  period  with  a 
working  system.  The  expression  can  be  picked  off  from  the  flow  dia¬ 
grams  shown  in  figures  (1)  and  (2).  has  been  previously  derived. 


< 


In  order  to  retain  some  order  of  simplicity  the  expression  previously  de¬ 
rived  for  Pq  has  not  been  substituted. 
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OPTIMIZATION  OF  THE  AVAILABILITY  RATIO 


Optimization  of  the  availability  ratio  is  the  first  step  in  the  optimization 
of  weapons  system  effectiveness.  Of  course,  it  might  be  asked  a-gainst  what 
variable  or  variables  do  we  optimize.  If  we  were  concerned  only  with  de¬ 
termining  the  effective  scheduled  time  between  interrogations  the  problem 
would  be  relatively  simple  since  we  would  then  only  need  to  take  dA/ST 
and  set  the  resulting  expression  to  zero.  We  would  then  solve  for  T. 
However,  this  is  not  the  case.  We  are,  in  fact,  interested  in  solving  for  T, 
but  it  turns  out  that  the  value  of  T^  is  partially  dependent  or  a  function  of  T. 
In  the  following  portion  of  this  section,  one  technique  of  achieving  availa¬ 
bility  optimization  will  be  presented. 

a.  What  is  Tr? 

Tr  as  now  defined  is  the  average  time -to-repair,  averaged  over 
a  large  number  of  repairs  for  a  system  which  has  been  operating  with  a 
specified  time -between -inter  rogations,  a  specified  number  of  service 
channels,  and  a  specified  logistic  (inventory  of  replacements)  picture. 

(1)  We  have  previously  stated  that  the  failure  rate  during  in¬ 
terrogation  (  ^  )  is  greater  than  the  failure  rate  during  standby  (  ^  ). 

(2)  If  we  assume  that  our  inventory  of  spares  is  inexhaustible 
and  that  a  pool  of  men  capable  of  making  the  necessary  replacement -type 
repairs  is  similarly  inexhaustible,  then  the  optimum  availability  is  derived 
by  a  simple  differentiation  and  Tr  is  not  a  f(T). 

(3)  Our  system,  however,  is  bounded  by  the  condition  that 

both  the  pool  of  spares  and  men  are  limited.  Therefore,  Tr  is  a  f(T). 

b.  The  Variation  of  Tr  as  an  f  (T) 

In  order  to  understand  this  process,  the  following  picture  of  T^. 
variation  is  presented: 

(1)  If  the  time-between-interrogations,  T,  is  large,  then  most 
of  the  failures  occur  during  the  standby  period.  Since  these  failures  are 
undetectable  until  the  interrogation  has  been  completed,  it  follows  that 
there  can  be  long  periods  of  undetectable  down  time.  The  net  result  of  an 
interrogation  schedule  of  this  type  is  to  lower  availability  and  limit  service 
requests . 


(2)  If  T  is  very  small,  then  the  great  majority  of  failures  must 
occur  during  interrogation  and  therefore  we  will  not  have  periods  during 
which  the  system  is  thought  good  but  is  really  bad.  The  result  of  this 
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schedule  is  to  radically  increase  the  number  of  failures  (hence,  the  number 
of  service  calls  and  replacements)  and  heavily  overload  the  service  and 
logistic  facilities.  The  result  of  this  operating  condition  is  two-fold; 

(a)  First,  the  value  of  increases,  because  the  number 
of  replacements  required  has  a  good  chance  of  exceeding  the  inventory,  and 
this  will  result  in  long  delays  which  average  into  the  value  of  T^. 

(b)  Second,  the  percent  down  time  due  to  the  increased 
ratio  of  interrogation  time  to  time  between  interrogations  directly  lowers 
the  availability  ratio. 

(3)  A  typical  graph  (normalized)  of  T  vs  Tr  (figure  (3)  )  shows 
that  the  situation  begins  to  blow  up  as  T  approaches  zero.  This  problem 
has  been  analyzed  mathematically  in  many  textbooks  on  queueing  theory 
where  the  average  rate  of  arrivals  exceeds  the  average  service  rate.  Al¬ 
though  the  queue  can  become  infinite  an  average  waiting  time  does  exist 
in  the  theoretical  limit.  However,  what  would  happen  in  this  case  is  that 
as  more  systems  await  servicing,  the  arrival  rate  will  decrease  and  a 
queue  limit  of  less  than  the  total  population  will  develop.  The  resulting  T^ 
will  be  large  and  of  course  the  availability  will  be  small. 

c.  Optimization  Methodology 


(1)  The  system  equation  for  P_  and  A  should  be  developed 
noting  that  T^,  is  really  the  expected  value  w  some  f(T)  or  E(f(T))  =  T^.. 

• 

(2)  Based  upon  knowledge  of  the  service  facility,  the  inventory 
levels  and  system  operating  reliability,  a  curve  or  model*  can  be  developed 
for  Tj.. 


(3)  Then  a  curve  or  model  of  A  can  be  derived  and  the  op¬ 
timum  can  be  picked  off  a  graph  of  T  vs  A  or  solved  by  differentiating 
with  respect  to  T.  In  any  event,  an  estimate  of  T  optimum  will  have  been 
made.  See  figure  (4). 


*  Models  which  are  closely  applicable  can  be  found  throughout  the  recent 
0-R  literature  and  textbooks. 
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OGATIONS 


OPTIMIZATION  OF  ELECTRONIC  WEAPONS  SYSTEM  EFFECTIVENESS 


Weapons  system  effectiveness  is  optimized  by  "trading-off"  between  the 
constituent  reliability,  maintainability,  and  accuracy  parameters  of  the 
system.  Up  to  this  point  we  have  discussed  the  optimization  of  availability 
as  a  function  of  reliability  and  maintainability. 


a.  System  Accuracy 

System  accuracy  is  a  function  of  component  accuracies  which  are 
statistical  in  nature.  Thus,  the  distributions  of  the  down  range  miss -dis¬ 
tance  (X)  and  the  cross  range  miss-distance  (Y)  are  both  Normal  with  zero 
mean.  In  general,  these  distributions  for  X  and  Y  are  independent,  so  that 
if  we  define  our  system  accuracy  as  the  radial  miss -distance  from  the  tar¬ 
get  (p),  and  assume  that  the  variances  of  X  and  Y  are  equal,  then  the  dis- 
tribvition  of  p  is  a  Rayleigh  distribution  with  a  standard  deviation  of  fS  • 

(1)  The  Rayleigh  distribution  is  represented  by  the  following 

expression:  ^2 

p(p)=^e^  , 

(2)  System  accuracy  is  usually  specified  in  terms  of  its  Circle 
of  Equal  probability  (CEP).  This  Circle  of  Equal  Probability  is  defined  as 
the  radius  of  a  circle,  centered  about  a  target  point,  which  has  a  50%  prob¬ 
ability  of  encompassing  the  weapon  system's  strike  point. 

(3)  The  probability  that  an  error  p  lies  within  a  circle  of 

radius  T  is  obtained  by  integration  ^  follows:  ^ 

r-§r,  *  I- 

V/^ 

where:  is  the  system  accuracy  probability  (cumulative  error  distribu¬ 

tion),  and  "C  is  the  allowable  radial  error  (miss -distance). 


(4)  If  we  let  P^  ■  0.5  (the  50  percent  probability 

point),  then  we  can  solve  for  the  specific  radius  ,  called  the  CEP 

radius,  for  the  system: 


and  'Q:ep  .  1.  1770"  . 


S’  0.5 
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(5)  Consequently,  the  accuracy  probability  {p^  f)  can  be 
stated  i ;  terms  of  system  CEP  radius  for  any  miss  distance  'if  as; 

P,  (f^r)  V-  e  ^  ’ 

b.  System  Effectiveness 

If  the  system  accuracy  function  is  modified  to  reflect  the  avail¬ 
ability  of  the  system  under  consideration,  an  expression  for  the  average 
system  effectiveness  emerges: 

where:  R  is  the  countdown  reliability,  and 

is  the  flight  reliability 

(1)  If  the  system  accuracy  is  independent  of  the  time  between 
interrogations  (T),  then  the  expression  for  the  average  system  effective¬ 
ness  ( )  as  stated  above  is  merely  a  function  of  the  availability  ratio  (A) 
and  is  optimized  when  A  is  optimized. 

(2)  If  during  the  interrogation  certain  characteristics  are  either 
checked  or  "set-in"  that  contribute  effectively  (plus  or  minus)  to  the  value 

of  system  CEP  and  these  characteristics  are  also  a  function  of  time  be¬ 
tween  interrogations,  then  the  optimization  technique  described  for  the 
weapons  system  effectiveness  in  paragraph  (1)  of  this  section  cannot  be 
strictly  applied. 


Since  the  desired  criteria  is  to  maximize  the  number  of 
weapon  system  "strikes"  rather  than  to  optimize  system  readiness,  the 
optimization  model  previously  derived  for  system  availability  is  no  longer 
self-sufficient. 


The  procedure  for  this  case  is  outlined  below: 

(a)  Generate  a  function  for  "available"  systems  vs.  time 
between  interrogations  (T)  by  computing  system  availability  for  each  main¬ 
tenance  interval  to  be  considered. 

(b)  Generate  a  function  for  system  CEP  vs.  time  be¬ 
tween  interrogations  by  considering  the  effects  of  lengthened  maintenance 
intervals  on  the  degradation  of  component  accuracies  and  their  statistical 
distribution  functions. 
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(c)  Select  the  conditions  for  optimum  system  effective¬ 
ness  by  maximizing  for  a  specified  miss -distance,  as  a  function  of 
maintenance  cycle  time  T.  A  typical  curve  of  vs.  T  for  a  system 
where  the  accuracy  degrades  with  T  is  shown  as  illustrated  in  figure  (5). 

c.  Minimum  Assurance  -  A  Final  Measure  of  the  Optimized 

Weapons  System  Effectiveness 

The  "average"  optimum  number  of  systems  strikes  expected 
within  r  miss -distance  of  the  target  can  be  established  by  multiplying  the 
optimum by  the  total  system  population.  The  characteristics  of  this 
average  strongly  imply  that  it  is  the  mean  of  a  Poisson  distribution.  There¬ 
fore,  it  can  now  be  determined  how  many  system  strikes  will  be  within  r 
miss-distance  of  the  target,  for  95%  of  the  time.  The  "minimum"  optimum 
value  of  weapons  system  effectiveness  is  then  obtained  when  the  minimum 
number  of  hits  is  divided  by  the  system  population. 
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f  CONCLUSIONS 

The  methods  described  in  this  paper  are  basic.  They  can  be  applied  to 
many  situations  concerning  the  effectiveness  of  any  large  population  of 
"demand"  systems.  For  an  electronic  weapons  system  the  final  measure  of 
its  effectiveness  is  the  system's  ability  to  respond  to  an  alert  and  destroy  at 
least  the*acceptable  minimum  number  of  targets  a  large  percentage  of  the 
time. 


a.  Applications  of  Results 

The  following  applications  of  this  technique  can  be  utilized; 

(1)  Two  or  more  differently  conceived  weapons  systems  can  be 
measured  on  a  common  ground  (economics  excluded  here,  but  the  economic 
questions  can  also  be  introduced)  and  the  most  effective  weapons  system 
can  be  selected. 

(2)  The  parameters  which  enter  into  the  measure  of  effective¬ 
ness  can  be  changed  and  the  net  improvement  or  degradation  can  be  meas¬ 
ured  making  it  relatively  simple  to  choose  the  most  promising  paths  of 
weapons  system  improvement.  Such  considerations  as  system  or  sub¬ 
system  redundancy  can  be  evaluated  in  terms  of  the  total  effect  upon  depot 
workload  and  spares  levels,  as  well  as  reliability  improvement,  and  the 
net  effect  on  weapon  system  effectiveness  can  be  properly  determined. 
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The  definition  of  maintainability  in  the  maintainability  specification 
Mil-M-26512B  tells  us  that  "Maintainability  is  the  characteristics,  both 
qualitative  and  quantitative,  of  material  design  and  installation  which 
make  it  possible  to  meet  operational  objectives  with  a  minimum  expend¬ 
iture  of  maintenance  effort  (manpower,  personnel  skill,  test  equipment, 
technical  data,  maintenance  support,  and  facilities)  under  operational 
environmental  conditions  in  which  scheduled  and  unscheduled  mainte¬ 
nance  will  be  performed."  This  makes  it  seem  that  maintainability  is 
basically  equipment- oriented;  however  we  must  remember  that  both  the 
prime  equipment  and  the  support  equipment  are  designed  to  be  operated 
and  maintained  by  man.  If  systems  are  to  be  easily  and  efficiently  main¬ 
tained  by  man  it  is  essential  that  hiiman  capabilities  and  limitations  be 
considered  in  system  design.  ’Bius,  in  a  sense,  we  can  say  that  main¬ 
tainability  is  human  oriented;  that  human  factor  considerations  are  of 
paramount  importance  in  achieving  maintainability.  It  is  my  purpose 
here  today  to  discuss  some  of  the  important  human  factor  considerations 
involved  in  design  for  maintainability.  My  remarks  will  briefly  cover  the 
following: 

a.  Human  factors  considerations  in  the  design  of  equipment. 

b.  Some  implication  of  the  number  and  skill  level  of  maintenance 
personnel. 

c.  Maintenance  aids,  including  maintenance  data  publications. 

d.  Maintainability  tradeoffs. 

I  will  also  mention  some  of  the  human  factors  data  available  for  use  by 
design  engineers  and  will  refer  briefly  to  some  research  that  is  pro¬ 
ducing  human  factors  engineering  data  for  maintainability. 

First,  we  will  look  at  some  maintainability  factors  in  the  design  of 
equipment,  or  more  specifically,  some  human  engineering  principles 
which  improve  maintainability.  These  principles  are  based  on  physical 
body  measurements,  physical  strength,  sensory  and  memory  limita¬ 
tions,  physical  endurance,  and  other  human  factors  information. 
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I  When  we  think  of  maintainability,  what  is  usually  the  first  thing  to  come 

to  mind?  Probably  it  is  accessibility  —  accessibility  of  test  points,  adjust¬ 
ing  screws,  components,  and  parts.  This  aspect  of  maintainability  is 
more  obvious  than  most.  In  repairing  equipment,  if  one  or  more  parts 
must  be  removed  to  reach  a  certain  part  for  replacement,  the  total  down 
time  is  increased.  Also,  if  access  openings  are  poorly  placed  or  so  small 
the  maintenance  man  has  difficulty  in  seeing  his  work  area  to  make  adjust¬ 
ments  or  to  remove  parts,  increased  maintenance  down  time  will  result. 
These  facts  about  accessibility  may  seem  so  obvious  as  to  need  no  discus¬ 
sion;  however  this  is  one  maintainability  principle  that  is  still  violated, 
often  without  cause  —  the  end  result  being  the  waste  of  thousands  of  main¬ 
tenance  hours  and  possibly  requiring  a  costly  modification  program.  Its 
importance  cannot  be  stressed  too  strongly. 

Some  other  design  factors  affecting  maintainability  are:  circuit  sim¬ 
plicity,  marking  and  color-coding  of  parts  and  modules,  interchange- 
ability  of  modules,  keying  of  connectors,  and  location  and  readability  of 
dials  and  other  indicators.  Maintenance  time  can  often  be  saved  by 
attention  to  these  factors.  Color-coding  of  wires  and  components  and 
stamping  of  identifying  information  on  sections  of  the  chassis  can  signif¬ 
icantly  reduce  maintenance  time.  Attention  to  circuit  simplicity  and 
standardization  should  reduce  not  only  the  time  to  isolate  a  malfunction 
but  also  the  amount  of  training  needed  by  technicians. 

Lack  of  attention  to  these  maintainability  factors  not  only  can  and 
often  does  lead  to  increased  down  time  in  finding  and  correcting  mal¬ 
functions,  but  also  may  degrade  reliability  by  inviting  human  error  in  the 
course  of  maintenance  operations.  Reliability  degrading  errors  such  as; 

(a)  improper  wiring,  (b)  bent  or  damaged  plugs,  (c)  inaccurate  adjust¬ 
ments,  (d)  skipping  a  checkout  step,(e)  replacing  wrong  component  and 
(f)  reversing  cables,  to  name  but  a  few,  can  often  be  avoided  by  proper 
equipment  design.  The  fact  that  approximately  40%  —50%  of  the  costly 
failures  in  our  missile  programs  can  be  traced  to  personnel  errors  of 
this  sort,  attests  to  the  critical  nature  of  the  human  factor  in  mainte¬ 
nance  and  equipment  design. 

The  human  engineering  design  factors  for  maintainability  which  I 
have  mentioned  so  far  do  not  begin  to  exhaust  the  array  of  human  factor 
considerations  in  design  for  maintainability.  Extensive  descriptions  of 
these  and  other  aspects  of  maintainability  design  are  available  in  two 
technical  reports:  WADC  TR  56-218,  "Guide  to  Design  of  Electronic 
Equipment  for  Maintainability"  (Ref2)  and  ASD  TR  61-381,  "Guide  to 
Design  of  Mechanical  Equipment  for  Maintainability"  (Ref  I  ).  Design 
data  from  these  guides  and  from  other  sources  of  human  engineering 
data  are  being  gradually  included  in  the'HIAD"series  (AFSCM's  80-1, 

80-3,  80-5,  80-6,  and  80-8)  where  they  are  possibly  more  convenient 
for  use  by  design  engineers. 

The  data  used  in  designing  working  spaces  and  access  openings  for 
equipment  is  based  on  anthropological  measurements  of  the  human  body. 
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including  arm  reach  and  hand  size.  In  other  aspects  of  equipment 
design,  the  data  is  based  on  limitations  of  man's  memory,  sensory 
abilities,  problem-solving  ability,  and  other  human  factors. 

The  Behavioral  Sciences  Laboratory  at  Wright -Patter son  Air  Force 
Base  has  research  in  progress  which  will  add  to  the  store  of  human 
factors  information  applicable  to  maintainability.  Results  from  these 
studies  will  be  incorporated  into  technical  reports,  military  standards, 
and  Air  Force  design  guides  and  handbooks.  The  Human  Engineering 
Branch  of  the  Behavioral  Sciences  Laboratory  is  presently  studying 
space  reqmrements  for  optimum  use  of  various  maintenance  tools. 

Studies  have  been  done  to  find  out  limitations  in  man's  arm  reach,  and 
his  ability  to  perform  when  encumbered  by  a  space  suit;  and  investiga¬ 
tions  of  the  problems  of  space  maintenance  are  also  in  progress. 

There  are  tradeoffs  which  can  be  made  between  various  maintain¬ 
ability  factors  in  the  design  of  equipment.  For  example,  if  it  is  not 
possible  to  give  the  desired  accessibility  to  some  parts,  special  tools 
may  be  furnished  for  removing  them.  If  it  is  not  possible  to  have  inter¬ 
changeable  modules  or  simplified  wiring,  a  clear,  legible  and  efficient 
system  of  marking  parts,  circuits,  and  modules  may  compensate.  In 
practice  it  will  be  found  that  design  for  maintainability  is  often  compro¬ 
mised  because  of  other  considerations  such  as  performance  requirements 
or  cost.  For  example,  it  may  be  necessary  to  locate  a  certain  item  in 
such  a  way  that  two  other  parts  must  be  removed  to  replace  it.  To 
locate  every  major  part  or  assembly  so  it  is  easily  accessible  could 
lead  to  an  extremely  complex  wiring  system  or  considerable  waste  of 
space. 

Design  engineers  responsible  for  making  the  final  decisions  on  design 
tradeoffs  should  weigh  carefully  all  the  design  factors  before  rejecting 
good  maintainability  features.  Special  care  must  be  taken  to  avoid 
placing  parts  in  locations  where  hours  are  required  to  remove  and  re¬ 
place  them,  or  in  having  circuitry  with  unnecessary  complexity,  thus 
requiring  more  skilled  man-hours  in  fault  isolation.  One  additional 
caution  for  the  design  engineer  and  maintainability  engineer  in  design¬ 
ing  system  equipment  lies  in  modifications  to  original  designs.  If 
relocation  of  parts  or  wiring  is  considered,  the  proposed  changes  must 
be  carefully  analyzed  to  see  if  maintainability  will  be  affected.  Will 
parts  having  the  higher  failure  probabilities  be  more  accessible?  Will 
relocation  of  a  part  block  access  to  another  part  or  to  test  or  servicing 
points  for  periodic  maintenance,  calibi'ation,  or  troubleshooting?  Will 
each  chassis  be  stamped  with  the  changed  location  of  parts  and  accesses? 
And  here  is  an  important  one:  will  every  reference  to  any  affected  part 
or  circuit  in  the  Technical  Orders  be  checked  to  see  that  it  is  correct 
in  every  respect?  Incorrect  diagrams,  instructions  and  parts  num¬ 
bers  are  a  cause  of  many  lost  man-hours  in  maintenance. 
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It  is  probably  unnecessary  to  mention  that  design  for  maintainability 
should  come  early  in  system  design,  long  before  the  construction  of  any 
hardware.  The  longer  we  wait  to  get  maintainability  in  the  system,  the 
more  probable  that  it  will  not  receive  consideration.  If  it  becomes  neces¬ 
sary  to  modify  a  system  to  improve  maintainability  after  the  system  is 
in  the  field,  the  cost  will  be  many  times  what  it  would  have  been  in  the 
design  phase. 

The  factors  I  have  discussed  to  this  point  are  those  usually  consid¬ 
ered  maintainability  factors  —  chiefly  factors  affecting  equipment  design. 
There  are  several  other  related  factors,  however,  that  interest  us 
greatly  because  of  their  effect  upon  system  maintainability.  These  are 
such  things  as  the  skill  and  training  of  personnel,  the  test  and  support 
equipment  used,  and  the  area  of  maintenance  aids,  including  maintenance 
data  publications. 

A  study  was  recently  completed  by  Republic  Aviation  Corporation 
(Ref  3),  based  on  questionnaires  and  interviews  with  2,  300  technicians  and 
supervisors  involved  in  Air  Force  maintenance  activities.  Results  showed 
that  the  quality  of  technical  data  varied  considerably  between  weapon  sys¬ 
tems,  and  that  in  general  there  is  much  room  for  improvement  in  present¬ 
ing  technical  information  to  the  technicians.  One  implication  of  the  findings 
is  that  much  costly  down  time  could  be  eliminated  by  making  information 
easier  to  find  and  easier  to  follow.  Other  maintenance  aids  such  as 
special  check  lists,  charts  and  color-coded  diagrams,  are  often  time 
savers,  especially  if  they  can  reduce  unnecessary  tests  and  lengthy  searches 
through  the  technical  orders. 

The  design  engineer  usually  does  not  make  decisions  about  the  back¬ 
ground  and  skills  of  the  crew  who  will  maintain  the  system  when  it  is 
operational.  He  must  keep  in  mind,  however,  that  the  system  must  be 
designed  so  it  can  be  maintained  by  the  using  command  personnel  who  will 
be  assigned  to  it.  Another  thing  to  remember  is  that  prediction  of  down 
times  should  be  based  on  maintenance  by  the  type  and  number  of  techni¬ 
cians  who  will  be  assigned  to  the  system;  and  demonstration  of  maintain¬ 
ability,  based  on  time  to  restore  equipment  to  normal  operation,  should  be 
accomplished  with  technicians  similar  in  experience,  skills  and  training 
to  the  men  who  will  ultimately  maintain  it.  Use  of  technicians  in  the 
demonstration  and  test  who  have  superior  skills  would  indicate  a  higher 
level  of  maintainability  than  actually  exists. 

The  test  and  support  equipment  used  may  have  a  marked  effect  on 
total  down  time.  Of  course  the  decision  as  to  how  automatic  and  mech¬ 
anized  the  test  and  support  equipment  should  be  is  usually  made  early  in 
the  planning  stage.  These  decisions  may  be  based  on  economic  consid¬ 
erations,  availability  of  skilled  manpower,  complexity  of  the  system, 
spares  to  be  available,  and  other  factors. 

It  is  probably  unnecessary  to  justify  to  you  the  need  to  consider 
maintainability  in  equipment  design.  If  anyone  should  doubt  the  importance 
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of  a  maintainability  program,  he  needs  only  to  listen  to  the  people  who 
use  the  equipment.  I  recently  conducted  a  study  of  human  errors  in  the 
operation  of  electronic  checkout  equipment  which  took  me  to  ten  field 
organizations  using  and  maintaining  five  completely  different  weapon 
systems.  I  interviewed  supervisors  and  administered  questioiuiaires  to 
scores  of  technicians,  gathering  much  information  about  errors  and  diffi¬ 
culties  the  technicians  experienced  as  well  as  their  opinions  and  sugges¬ 
tions  for  improvement  of  the  maintenance  system.  There  were  many 
reports  of  parts  and  check  points  hard  to  reach.  One  technician  reported 
that  to  replace  a  certain  transformer  on  a  Tacan  unit,  it  was  necessary 
to  remove  the  entire  front  of  the  unit,  disconnecting  other  wiring  and 
parts,  requiring  about  two  hours.  If  the  transformer  had  been  easily 
accessible,  ten  minutes  would  probably  have  been  adequate.  Also 
removing  and  replacing  the  front  panel  often  resulted  in  other  malfunctions 
or  required  circuit  adjustments.  A  large  percent  of  all  technicians  in 
this  study  felt  that  better  technical  data,  diagrams  and  check  lists  would 
speed  up  maintenance.  Much  of  the  equipment  in  these  systems  did  not 
have  adequate  handles  for  lifting,  had  inadequately  marked  access  open¬ 
ings  and  parts  locations  on  chassis.  Although  final  analysis  of  all  the 
information  from  these  technicians  has  not  been  made,  it  seems  safe  to 
say  that  more  attention  to  maintainability  in  these  systems  would  have 
saved  thousands  of  man-hours  and  greatly  reduced  the  so  called  "human 
error"  problem. 

This  feedback  from  people  who  are  using  and  maintaining  Air  Force 
equipment,  some  of  it  with  a  high  degree  of  built-in  maintainability  and 
some  barely,  maintainable,  adds  support  to  my  comments  during  the  past 
few  minutes.  Maintainability  factors  are  important  in  the  design  of  prime 
equipment  and  support  equipment,  and  human  factors  data  found  in  main- 
tcdnability  gmdes  and  in  design  handbooks  can  be  an  invaluable  aid  in  the 
design  of  maintainable  equipment. 
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SUMMARY 

Recent  research  efforts  have  resulted  in  the  development  of  tech¬ 
niques  to  implement  the  requirements  of  Maintainability  Specification 
MIL-M-2651 2B.  This  paper  describes  the  application  of  the  basic  con¬ 
cepts  of  this  document  during  various  phases  of  the  AN/TSQ-47  program. 

A  maintainability  program  was  initiated  to  implement  the  system 
specification  for  maintainability.  This  program  provides  for  training, 
orientation,  and  control  of  subcontractor  efforts.  The  program  also  pro¬ 
vides  a  systematic  approach  for  design  review  and  documentation  of  the 
state-of-the-art  of  existing  and  newly  designed  hardware.  Human  engi¬ 
neering,  reliability  and  logistical  studies  provide  supporting  documenta¬ 
tion.  Engineering  support,  essential  in  the  achievement  of  maintainability, 
is  featured  as  a  system  parameter;  it  is  provided  through  concise  and  ob¬ 
jective  design  guidelines. 

Application  of  maintainability  design  checklists  provides  essential 
ingredients  leading  to  predicted  indices  at  the  subsystem  and  system  level. 
Investi'gation  of  problem  areas  during  application  of  the  checklists  is  illus¬ 
trated.  Preliminary  empirical  data  and  design  scoring  of  maintainability 
factors  is  presented.  Verification  of  derived  numerics  is  carried  out  dur¬ 
ing  subsystem  and  system  tests  to  provide  documentation  for  subsequent 
system  design  improvements.  Subsequent  considerations  are  given  for  the 
remainder  of  the  program. 

INTRODUCTION 

It  was  expressly  brought  to  the  speakers  attention  that  this  presen¬ 
tation  on  "Designing  Maintainability  into  the  AN/TSQ-47  System  Hardware" 
should  not  be  philosophical.  Voltaire  once  stated:  "When  he  who  hears 
doesn't  know  what  he  who  speaks  means,  and  when  he  who  speaks  doesn't 
know  what  he  himself  means,  that  is  philosophy.  "  Thus  it  is  the  speakers 
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Intention  to  dispense  with  philosophy  and  bring  to  light  the  factual  criteria 
utilized  in  establishing  the  maintainability  program  for  the  AN/TSQ-47 
system,  beginning  with  the  scope  of  the  program  and  ending  with  resultant 
conclusions. 


a.  Scope  of  the  Maintainability  Program 

System  specification  MIL-A-Z79I9,  with  Amendment  No.  1, 
establishes  that  the  maintainability  program  shall  be  strictly  limited  to  the 
detection,  identification  analysis,  and  reporting  of  problem  areas  at  the 
system,  subsystem,  and  major  component  level.  A  major  component  is 
defined  as  a  cornplete  set,  such  as  a  radar  set,  a  communications  set,  a 
teletypewriter,  an  indicator,  etc. 

The  program  shall  not  concern  itself  with  the  individual  circuit 
elements  of  such  sets  without  submitting  adequate  technical  justification  to, 
and  obtaining  prior  approval  of,  the  cognizant  engineering  agency.  It  shall 
not  be  permitted  to  impede  or  delay  the  design,  fabrication,  test,  or  de¬ 
livery  of  the  AN/TSQ-47  system,  nor  shall  its  recommendations  be  con¬ 
sidered  sufficient  grounds  for  engineering  changes  in  the  system  or  equip¬ 
ment  specifications. 


b.  Applicable  Documents 

(1)  Specifications  -  Maintainability  requirements  are  contained 
in  the  following  documents: 


MIL-A-27919 


MIL-M-26512B 


WS-Q47-19 


Military  Specification,  Air 
Traffic  Control  and  Com-  , 

munications  System  AN/TSQ-47 

Military  Specification,  Maintain¬ 
ability  Requirements  for  Aero^ 
space  Systems  and  Equipment 

General  Requirement  Specifica¬ 
tions,  Air  Traffic  Control/Com¬ 
munications  System  AN/TSQ-47^ 


Parag[raph  3,  5.  2.  7  of  MI1j-A-E7919  states  the  requirements  for  the  main¬ 
tainability  program. 

(2)  Special  Instructions  -  In  addition  to  the  above  requirements, 
special  instructions  have  been  issued  by  the  482-L  System  Program  Office, 
requesting  that  initial  maintainability  analysis  data  be  submitted  concur¬ 
rently  with  equipment  design  approval  data. 

SYSTEM  DESCRIPTION 


To  delineate  clearly  the  problems  confronted  by  the  Program  Man¬ 
agement  Office  of  the  AN/TSQ-47  program  in  establishing  a  meaningful 
maintainability  program,  it  is  necessary  to  describe  briefly  the  AN/TSQ-47 
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system  components  and  their  complexity.  Figure  1  shows  a  typical  deploy¬ 
ment  of  the  subsystems  that  make  up  the  AN/TSQ-47  system. 

a.  Subsystems  and  Major  Components 

(1)  AN/TPS-35  Air  Search  Radar  Set  -  This  subsystem  con¬ 
tains  the  following  equipment: 

a)  Radar  Equipment  AN/UPS-1  -  This  is  an  off-the-shelf 
equipment  that  has  been  in  existence  a  number  of  years 
modified  to  incorporate  Electronic  Counter  Counter- 
Measures  (ECCM). 

b)  IFF  (Identification  Friend  or  Foe)  Equipment  -  This  is 
Government  Furnished  Equipment. 

c)  Microwave  Relay  Link  -  This  is  a  modified  version  of 
the  Motorola  FRQ-11  system.  (Also  included  is  a 
coaxial  link.) 

d)  Communications  Equipment  -  This  consists  of  ultra- 
high-frequency  and  very-high-frequency  transmitter - 
receivers.  In  addition,  the  intershelter  communica¬ 
tions  equipment  RACEP  (Random  Access  Correlation 
Extended  Performance)  is  a  major  element  of  com¬ 
munications. 

e)  Power  Sources  -  These  consist  of  2  to  20  kw  gas  tur¬ 
bine  generators  and  miscellaneous  equipment. 

f)  Junction  Boxes  -  These  are  utilized  for  interconnection 
of  power  and  signal  distribution. 

g)  Air  Conditioner  -  This  unit  maintains  the  shelter  at  an 
acceptable  temperature  and  humidity. 

All  of  the  above  units  are  integrated  in  an  S141  type  shelter. 

(2)  AN/TSW-5  IFR  (Instrument  Flight  Rules)  Shelter  (RAPCON 
Radar  Approach  Control)  -  This  is  the  main  center  for  landing  aircraft 
under  poor  visibility  conditions.  Equipment  contained  within  the  shelter 
consists  of: 

a)  IFF  Equipment  -  This  is  Government  Furnished  Equip¬ 
ment. 

b)  Microwave  Relay  Link  -  This  is  a  modified  version  of 
the  FRQ-11  Motorola  system  (including  a  coaxial  link). 

c)  Inter  shelter  Communications  -  This  is  achieved  via  the 
RACEP  equipment. 
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d)  Audio  Equipment  -  This  consists  of  mikes,  headsets, 
and  distribution  panels, 

e)  Numerous  Display  and  Control  Panels  (indicators  and 
projectors  are  examples). 

i'l  Power  Sources  -  These  are  made  up  of  4  to  20  kw  gas 
turbine  generators  and  miscellaneous  equipment  meters 
panels,  etc.) 

g)  Junction  Boxes  -  These  distribute  power  and  signal 
sources. 

h)  A  light  gun  t.o  signal  landing  aircraft. 

i)  Air  Conditioner  -  This  unit  maintains  temperature  and 
humidity  within  the  specially  constructed  shelter,  which 
is  motorized  to  extend  wings  for  additional  space  re- 
qi.ir  ements. 

(3)  AGA  (Air-Ground-Air)  Communications  Shelter  -  This  is 
an  annex  to  the  AN/TSW  RAPCON  shelter.  Contained  within  this  shelter 
are  the  following: 

a)  Communications  gear  consisting  of  high-frequency, 
very-high-frequency,  and  ultra-high  frequency  trans¬ 
mitter-receiver  equipment  and  intershelter  communica¬ 
tions  gear  (RACEP). 

b)  A  self-contained  28-volt  d-c  power  supply. 

c)  Various  junction  boxes  for  distribution  of  power  and 
signals. 

d)  An  Air  Conditioner  to  maintain  an  acceptable  environ¬ 
ment  within  the  shelter. 

(4)  AN/TSC-23  Air  Traffic  Control  Communications  Center 
Shelter  -  This  unit  provides  world-wide  communications  via  voice  and  tele¬ 
type.  Coded  or  uncoded  information  may  be  transmitted.  Housed  within 
the  shelter  are: 

a)  Teletype  equipment  consisting  of  frequency-shift  keyers 
control  panels,  jack  panels,  crypto,  and  teletypewriter. 

b)  Communications  equipment  consists  of  a  high-frequency 
radio  receiver  and  transmitter,  and  intershelter  com¬ 
munications  equipment  (RACEP).  An  electric  type¬ 
writer  is  used  to  duplicate  messages. 

c)  Audio  equipment,  such  as  headsets,  landlines,  and 
microphones. 
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d)  Power  sources  for  this  shelter  are  3  to  20  kw  turbine 
generators  and  special  power  supplies. 

e)  An  air  conditioner  maintains  the  proper  environment 
within  the  shelter,  a  modified  SI 41  type. 

(5)  AN/TSW-6  VFR  (Visual  Flight  Rules)  Shelter  (Flight  Con¬ 
trol  Towers)  -  This  subsystem  provides  communications  for  flight  control 
under  good  visibility  conditions  and  for  taxiing  aircraft  to  parking  areas. 
Contained  in  this  newly  designed  shelter  are  the  following  equipments: 

a)  High-fr equeiicy,  very-high-frequency,  and  ultra-high 
frequency  receiver-transmitter  and  intershelter  com¬ 
munications  equipment  (RACEP), 

b)  Audio  equipment 

c)  Display  and  control  panels 

d)  Direction  finder  (DF)  and  indicator,  which  is  r emoted 
from  the  TRN-17. 

e)  Power  supplies  consist  of  2  to  20  kw  gas  turbine  gener¬ 
ators  and  a  28-volt  d-c  power  supply. 

f)  Junction  Boxes  for  distribution  of  power  and  signal 
sources. 

g)  Light  gun  and  wind  measuring  equipment. 

h)  An  air  conditioner  for  maintaining  an  adequate  environ¬ 
ment  within  the  shelter, 

(6)  AN/TPN~.14  Precision  Approach  Radar  Set  -  This  subsystem 
utilizes  the  following  equipment: 

a)  Modified  version  of  the  field-proven  AN/TPN-8  Radar 
Set. 

b)  Microwave  equipment  link  utilizing  the  modified  version 
of  the  Motorola  FRQ-11  system. 

c)  Communications  equipment  consisting  of  very-high- 
frequency  and  ultra-high-frequency  gear  and  inter - 
shelter  communications  gear  (RACEP). 

d)  Audio  equipment  such  as  that  contained  in  other  sub¬ 
systems. 

e)  Power  sources  are  2  to  20  kw  gas  turbine  generators 
and  special  power  supplies. 
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f)  Junction  Boxes  for  routing  power  and  signal  lines. 

g)  An  Air  Conditioner  to  provide  the  required  environ¬ 
ment  within  this  modified  S141  Shelter. 

(7)  AN/TRN-17  Beacon  Transponder  -  This  subsystem  is  uti¬ 
lized  as  a  navigational  aid  for  approaching  aircraft,  and  is  Government 
Furnished  Equipment  modified  to  operate  with; 

a)  20 -kw  gas  turbine  generator 

b)  Static  converter  (60-cycle  operation) 

c)  Air  conditioner  for  maintaining  proper  environment. 

The  navigational  equipment  consists  of  a  transponder,  monitor,  and  control 
unit. 


b.  Air  Traffic  Control  Mission  Concepts 

Air  Traffic  Control/Communications  System  AN/TSQ-47  will 
be  used  by  the  Air  Force  Systems  Command  mobile  squadron  to  support 
the  operation  commands  on  emergency  military  missions  and  to  support 
civil  authorities  during  disaster  and  emergencies.  The  following  specific 
missions  may  be  expected  in  support  of  the  operational  commands: 

a)  Support  of  a  newly  acquired  advanced  air  base  under 
combat  conditions. 

b)  Temporary  replacement  or  supplement  to  a  fixed 
facility. 

c)  Training  and  mobility  exercises. 

c.  Maintainability  Factors 

Before  beginning  the  technical  discussion  it  is  worthwhile  to 
state  a  generally  accepted  definition  for  maintainability:  "The  combined 
qualitative  and  quantitative  characteristics  of  material  design  and  installa¬ 
tion  which  enable  the  accomplishment  of  operational  objectives  with  the 
minimum  expenditures  including  manpower,  personnel  skill,  test  equipment, 
technical  data,  and  facilities  under  operational  environmental  conditions  in 
which  scheduled  and  unscheduled  maintenance  will  be  performed.  " 

Maintainability  factors  can  then  be  defined  as  a  group  of  factors 
and/or  environmental  features  which  affect  the  performance  of  maintenance 
on  electronic  equipment.  Some  examples  required  by  the  equipment  speci¬ 
fications  are; 

a)  Test  points  for  essential  waveforms. 

b)  High-voltage  interlocks  and  external  indicator  devices. 
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c)  Circait  protectors  with  status  indicators  on  front 
panels. 

d)  Ground  straps  for  each  rack  for  earthing. 

e)  All  components  to  be  readily  accessible  for  tune-up 
operation  and  routine  maintenance. 

f)  Units  requiring  assembly  and  disassembly  during 
maintenance  to  be  secured  with  captive  screws. 

g)  Pattern  charts  of  circuit  functions  located  conven¬ 
iently  for  rapid  testing. 

MAINTAINABILITY  CONSIDERATIONS 


As  has  been  indicated,  maintainability  requirements  for  the  AN/ 
TSQ-47  system  are  specified  in  MIL-A-27919.  Paragraph  3.  5.  2.  7  of  the 
specification  provides  that  maintainability  specification  MIL-M-26512B  will 
be  used  as  a  guide  to  carry  out  analyses  of  systems  and  subsystems.  The 
maintainability  objectives  for  the  AN/TSQ-47  are  stated  in  general  quali¬ 
tative  terms.  The  specifications  establish  a  means  for  determination  of 
the  state-of-the-art  of  equipments  to  be  used  in  the  system  without  refer¬ 
ence  to  a  specific  maintainability  numerical  as  a  design  goal. 

a.  Specification  References 

Applicable  portions  of  specification  MIL-A-27919  are 
referenced  as  follows: 

(1)  Maintainability  Principles  -  Paragraphs.  8.  3  of  the  speci¬ 
fication  outlines  general  design  considerations.  Included 
are  such  factors  as  (1)  minimum  complexity  of  maintenance, 

(2)  design  for  accessibility,  and  (3)  design  for  rapid  and 
positive  equipment  fault  recognition. 

(2)  Maintainability  Characteristics  -  Paragraph  3.  1.4  states 
that  maintainability  characteristics  of  equipment  shall  be 
determined.  Factors  to  be  considered  shall  include  Mean 
Time  Between  Failures,  Mean  Time  To  Repair,  and  Mean 
Time  for  Scheduled  Maintenance. 

(3)  System  Compatibility  Factors  -  Paragraph  3.2.5  essentially 
states  that  major  problem  areas  be  determined  during  the 
analysis. 

(4)  Plan  for  Demonstration  of  Maintainability  -  A  method  for 
determining  and  establishing  quantitative  requirements  for 
active  maintenance  downtime  and  for  establishing  tests  are 
presented  in  Appendix  A  of  the  specification. 
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(5)  Maintainability  Requirements  for  Design  Changes  -  Para¬ 
graph  3.  2.  7  states  that  additional  evaluation  will  be  made 
whenever  design  changes  are  made  for  product  improvement. 


(6)  Maintainability  Definitions  and  Maintainability  terms  are 
defined  in  Paragraph  6.  3,  Included  are  Active  Corrective 
Downtime,  Availability,  and  Maintenance  Task.  Appropri¬ 
ate  symbols  are  given  for  each  term, 

b.  Maintainability  Requirements 

General  maintainability  requirements  for  design  and  fabrication 
of  equipment  used  in  the  AN/TSQ-47  system  are  outlined  in  applicable  RCA 
specifications  or  "work  statements".  These  work  statements  are  issued  by 
the  Program  Management  Office  to  the  various  subcontractors.  Maintain¬ 
ability  tasks  to  be  accomplished  are  set  out  in  detail.  In  summary  the  tasks 
include  the  foll<Vwing: 

(1)  Maintainability  Control  -  A  maintainability  program  will  be 
developed  and  implemented  in  accordance  with  applicable 
portions  of  MIL-M-265 1 2B,  New  or  modified  equipment 
will  be  designed  to  the  applicable  portions  of  this  specifica¬ 
tion. 

(2)  Maintainability  Analysis  Information  -  Maintainability  data 
is  to  be  provided  on  both  existing  and  newly  designed  equip¬ 
ment  at  the  initial  stages  of  contract  award.  Requirements 
include  general  supporting  information,  maintainability 
policy  and  how  the  program  will  be  implemented,  docu¬ 
mented  mean  downtime  estimates,  and  problem  areas. 

(3)  Maintainability  Rating  -  Simulated  maintenance  tasks  are 
to  be  scored  using  the  checklists  given  in  RADC-TDR-62- 
156.  ^  Scoring  is  to  be  carried  out  through  use  of  the  given 
criteria.  Qualified  engineering  personnel  will  perform  the 
scoring. 

c.  Data  Flow 

The  overall  maintainability  plan  for  the  AN/TSQ-47  system  is 
depicted  in  Figure  2.  It  can  be  seen  that  the  program  provides  for  a  sys¬ 
tematic  approach  to  the  flow  and  control  of  maintenance  data  throughout 
the  development  phases.  Liaison  with  the  System  Project  Office  provides 
for  decision-making  capabilities  on  a  timely  basis.  Essential  data  input 
is  derived  from  equipment  subcontractors  for  final  analysis  by  the  product 
assurance  office.  Where  necessary,  feedback  loops  are  provided  for  cor¬ 
rective  action,  monitoring,  and  guidance  in  support  of  the  subcontractor's 
program.  Such  groups  as  Human  Engineering,  Design  Engineering,  Aero¬ 
space  Ground  Equipment,  and  Personnel  Subsystems,  contribute  essential 
data  input  for  the  final  analyses. 

(1)  Data  Acquisition  -  Essential  data  input  for  the  subsystem 
analysis  is  derived  from  subcontractor  reporting.  Specific  data  require¬ 
ments  for  maintainability  analysis  are  shown  in  Figure  3.  Under  "Main¬ 
tainability  Analysis",  specific  numerics  on  newly  designed  modified,  and 
existing  equipment  are  provided.  Maintainability  rating  data  provides  the 
basis  for  a  theoretical  •evaluation  of  equipment  through  the  application  of 
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Figure 


the  maintainability  prediction  technique  previously  referenced.  Results 
of  qualification  and  acceptance  tests  are  reported  in  terms  of  maintenance 
time  required  to  accomplish  specific  maintenance  tasks  resulting  from 
actual  equipment  failures  during  operational  tests.  System  engineering 
documentation  provides  supporting  and  supplementary  input  for  subsequent 
analysis. 


(2)  Data  Application  -  Maintainability  numerics  based  on 
empirical  and  predicted  data  provided  the  essential  ingredients  for  the 
construction  of  subsystem  and  system  profiles.  Such  information  con¬ 
stitutes  basic  decision-making  data  for  the  determination  of  design  re¬ 
quirements  for  future  systems.  Submissions  are  also  prepared  as  part 
of  the  design  approval  cycle  on  equipments  and  shelter  interface.  At  this 
point,  problem  areas  and  recommendations  are  initially  made.  These 
recommendations  are  modified  and  expanded  in  the  final  phases  of  the 
project. 

d.  Design  Review 

Maintainability  design  review  is  carried  out  in  conjunction  with 
design  approval  action  and  as  part  of  the  prediction  steps.  Basic  consid¬ 
eration  is  given  to  general  maintainability  features.  A  number  of  these 
features,  expressed  as  design  criteria  for  maintainability,  are  shown  in 
Figure  4.  To  carry  out  the  design  review,  certain  technical  information 
is  necessary. 


DRAWERS  AND  RACKS  --  PULL-OUT  FEATURES 
COMPONENTS  AND  CIRCUITS  --  PROTECTIVE  DEVICES 
ACCESSIBILITY  --  HUMAN  FACTORS 

SELF-TEST  FEATURES  --  BUILT-IN  TEST  EQUIPMENT 
PACKAGING  CONCEPTS  --  EASE  OF  REMOVAL 
CONNECTORS  --  QUICK-RELEASE  FEATURES 
TEST  POINTS  --  AVAILABILITY  AND  ACCESS 
ADJUSTMENTS  --  MINIMIZE  REQUIREMENTS 


Figure  4.  Maintainability  Design  Criteria 


(1)  Technical  Data  -  Technical  data  consists  of  the  following: 

a)  Equipment  physical  construction  and  profiles. 

b)  Equipment  block  diagrams,  schematics,  and  signal 
flow  charts. 

c)  Equipment  operating  theory  and  characteristics. 


d)  Maintenance  philosophy,  operating  procedures,  and 
maintenance  instructions. 

(2)  Major  Problem  Areas  -  In  the  design  review,  particular  at¬ 
tention  is  given  to  major  maintenance  problem  areas  which  may  have  signi¬ 
ficant  effect  on  the  system  mission.  For  design  approval,  the  worse  case 
situation  is  taken  to  highlight  these  problem  areas.  The  format  illustrated 
in  Figure  5,  is  used  for  this  purpose.  The  resulting  predicted  maintenance 
time  provides  an  indication  of  the  maximum  anticipated  maintenance  time  to 
perform  a  maintenance  task  within  the  shelter  interface;  that  is,  the  time  to 
isolate  a  malfunction  within  the  shelter  to  a  specific  location  and  replace  the 
defective  equipment. 

e.  Maintenance  Analysis  Data 

Maintenance  data  from  field  evaluation,  tests,  and  past  experi¬ 
ence  provide  documented  time  information.  Since  a  major  portion  of  the 
AN/TSQ-47  system  utilizes  equipment  having  operational  background,  this 
data  constitutes  an  important  and  major  input  for  establishing  maintainability 
profiles  and  for  design  approval  submission.  As  may  be  seen  from  Figure  5, 
documentation  of  major  problem  areas  is  required  for  proper  analysis. 

f.  Qualification  and  Acceptance  Tests 

Information  derived  from  qualification  and  acceptance  tests  pro¬ 
vides  important  data  for  verification  of  initial  maintainability  evaluations. 
Supplementary  information  reflecting  such  maintenance  concepts  as  techni¬ 
cian  requirements  and  spares  provisioning  may  find  useful  application  during 
final  system  analysis.  Data  to  be  reported  includes  the  following: 

(1)  Failed  component  or  part  identification. 

(2)  Operate  time  of  unit  from  which  component  or  part  was 
taken. 

(3)  Failure  symptom. 

(4)  Cause  of  failure. 

(5)  Corrective  action  taken. 

Additional  data  is  provided  through  test  records  submitted  during  and  after 
completion  of  the  tests.  Figure  6  indicates  the  flow  paths  for  test  data. 

MAINTAINABILITY  CONTROL 

a.  Evaluation  and  Control  Procedures 

It  is  desirable  that  a  systematic  and  uniform  approach  be  estab¬ 
lished  and  carried  out  during  the  program.  Further,  since  the  system  con¬ 
sists  of  newly  designed  as  well  as  existing  equipment,  it  was  necessary  that 
maintainability  criteria  be  developed  for  the  program  in  the  initial  phases  of 
development.  Supporting  documentation  to  the  specifications  and  the  program 


NO.  OF 

DESIGN  CHECKLIST  PROBLEM  ENVIRONMENTAL  AND  SPECIAL 

FEATURES  SCORE  AREAS  PROBLEM  REMARKS 
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Figure  5.  Physical  Design  Checklist 
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plan  bas  been  accomplished  through  the  issuance  of  a  maintainability  guide¬ 
line.  This  document  serves  two  purposes:  (1)  uniform  procedures  for 
data  reporting  and  analysis  are  provided  to  subcontractor  and  other  cogni¬ 
zant  activities  and  (2)  maintainability  design  criteria  are  formulated^for 
engineering  guidance.  In  summary  these  guidelines  present  the  informa¬ 
tion  described  below. 

(1)  Principles  and  Application  -  Basic  concepts  and  leading 
particulars  pertaining  to  the  prediction  technique  are  explained.  The  meth¬ 
od  for  applying  these  techniques  are  detailed. 

(2)  Prediction  Procedure  -  Steps  leading  to  scoring  and  calcu¬ 
lating  appropriate  indices  are  outlined.  Mathematical  formulas  required 
for  the  determination  of  these  indices  are  given. 

(3)  Scoring  Checklists  -  Criteria  for  evaluating  maintainability 
design  features  are  given.  Each  checklist  question  is  explained  to  enable  a 
qualified  engineer  to  score  the  checklists.  Checklist  A,  Physical  Design, 
Checklist  B,  Design  Dictates-Facilities,  and  Checklist  C,  Design  Dictates- 
Maintenance  Skills,  are  presented. 

(4)  Maintainability  Design  Guidelines  -  Maintainability  factors 
important  to  design  are  outlined.  These  factors  have  been  found  to  have 
significant  influence  on  equipment  maintenance  time. 

(5)  Terms  and  Definitions  -  Terms  important  to  maintainability 
measurement  are  presented  and  defined.  These  terms  are  consistent  with 
usage  in  government  and  industry. 

(6)  Failure  and  Repair  Reporting  -  Procedures  for  data  acqui¬ 
sition  during  qualification  and  acceptance  testing  are  detailed.  Means  are 
provided  for  collecting  essential  equipment  data  during  equipment  tests. 

b.  Development  of  the  Program  Plan 

The  applicable  documents  previously  discussed,  and  the  RCA 
AN/TSQ-47  System  Proposal  were  utilized  to  construct  the  Maintainability 
Program  Plan.  Careful  attention  was  given  to  the  time  phasing  of  contract 
elements,  since  equipment  delivery  was  scheduled  12  months  from  the  con¬ 
tract  date  of  award.  Development  of  the  program  plan  was  based  on  the 
following  premises: 

a)  Maintainability  was  not  to  impede  or  delay  the  design, 
fabrication,  test,  or  delivery  of  the  system. 

b)  Recommendations  could  be  given  but  not  necessarily 
implemented  on  this  program. 

c)  A  recommended  program  covering  future  USAF  Cate¬ 
gory  II  and  III  tests,  to  follow  acceptance  tests,  would 
be  outlined. 
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(1)  With  this  background,  it  was  possible  to  construct  the  pro¬ 
gram  outline  by  considering  the  following  question.  "How  can  RCA  provide 
the  System  Project  Office  with  an  effective  and  timely  program  within  the 
time  scheduling  requirements  of  the  contract?" 

(2)  Product  Assurance  Plan,  Section  B  -  Maintainability  will 
be  investigated  quantitatively  in  order  to  evaluate  problem  areas  and  rec¬ 
ommend  solutions  to  the  procuring  activity.  The  program  p^an  contains 
the  following  sections: 6 

I.  Maintainability  Prediction 

A.  Completion  of  checklists  A,  B,  and  C  of  RADC-TDR-62-156. 

B.  Initial  calculation  of  M,j,. 

C.  Reliability  and  Maintainability  Status  Report  -day  report¬ 
ing  interval). 

II.  System  Evaluation  at  time  of  Design  Approval. 

A.  Correlation  of  maintainability  principles  with  manpower 
cost  and  input  of  M,j, . 

B.  Statement  of  maintainability  problem  areas  with  prelimi¬ 
nary  recommendations. 

C.  Updating  of  maintainability  analyses  to  be  included  in  90- 
day  status  reports. 

III,  Final  Recommendations 

IV.  Plan  for  USAF  Category  Il/lII  Tests  of  the  AN/TSQ-47. 

A.  System  Maintainability  Demonstration. 

B,  System  Maintainability  Evaluation, 
c.  Implementation  of  Plan 

Since  the  program  involves  numerous  subcontractors  it  was 
necessary  to  devise  a  method  of  control.  Control  was  established  for 
audit  of  both  overall  product  assurance  and  maintainability  analysis. 

(1)  Product  Assurance  Program  Audit,  Section  H  -  The 
Product  Assurance  Office  for  the  AN/TSQ-47  system  is  responsible  for 
auditing  subcontractors  for  the  system,  susbystems,  and  major  compo¬ 
nents,  previously  described,  for  the  following  activities  and  in  accordance 
with  the  contract  and  applicable  specifications: 

a)  R  eliability 

„  b)  Maintainability 
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c) 

d)  Quality  assurance 

e)  Design  assurance 

f)  Failure  data  collection  and  analysis 

g)  Audit  check  list  preparation 

(2)  Audit  Checklist  -  Expanding  on  b)  and  e)  of  the  above  list, 
product  assurance  audit  checklists  were  developed.  Figure  7  illustrates 
the  various  areas  reflecting  the  overall  subcontractor  maintainability  pro¬ 
gram.  A  similar  checklist,  shown  in  Figure  8,  was  developed  to  evaluate 
the  progress  of  the  subcontract  maintainability  analysis. 

(3)  Audit  Scheduling  -  An  audit  schedule  was  developed  to  cover 
three  periods  during  the  contract: 

a)  Prior  to  fabrication  in  order  to  orient  subcontractors 
on  the  requirements  of  the  work  statement,  specifica¬ 
tions,  and  contract,  as  well  as  an  initial  audit  of  facili¬ 
ties  and  the  capability  of  meeting  these  requirements. 

b)  During  test  to  evaluate  ease  in  troubleshooting  and  re¬ 
pair  of  equipment  and  as  a  follow-up  audit. 

c)  Final  audit  prior  to  delivery  of  hardware  to  observe 
acceptance  tests  and  final  inspection  of  equipment. 

SUPPORTING  ACTIVITIES 


In  order  that  an  effective  maintainability  program  may  be  carried 
out,  certain  vital  technical  data  must  be  available  on  a  timely  basis.  Data 
pertaining  to  equipment  reliability,  personnel  technical  requirements,  and 
design  data  must  be  made  available  early  in  the  development  phases,  and 
updated  periodically  during  the  program. 

a.  Reliability  Data 

Reliability  measurements  provide  a  direct  indication  of  equip¬ 
ment  maintenance  requirements.  Equipment  failure  rates  and  the  number 
of  parts,  when  translated  into  maintenance  terms,  reflect  the  frequency  of 
maintenance  for  equipment,  subsystems,  and  the  system.  In  the  AN/TSQ-47 
program  reliability  data  serves  two  important  functions:  (1)  failure  contri¬ 
bution  of  Components,  assemblies,  etc.  are  determined  and  (2)  the  severity 
of  problem  areas  is  isolated.  Additional  application  of  reliability  data  may 
be  made  during  final  system  evaluation  where  an  overall  product  value  is 
desired. 


(1)  Initial  Analysis  -  Equipment  failure  rates  are  applied  during 
the  initial  analysis  of  maintenance  data  to  evaluate  equipment  and  shelter  in¬ 
terface.  Through  the  use  of  reliability  data,  areas  likely  to  be  subjected  to 
repeated  maintenance  are  isolated. 
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(2)  Prediction  -  In  conjunction  with  the  scoring  process  and 
application  of  the  prediction  technique,  reliability  data  is  used  to  determine 
the  failure  contribution  of  equipment  assemblies,  modular  units,  etc.  This 
process  isolates  high-density  maintenance  areas  and  establishes  the  need 
for  further  consideration  of  potential  problem  areas.  Table  1  illustrates 
the  procedure,  utilizing  basic  reliability  data. 


Table  1.  Equipment  Failure  Contribution 


Modules 

(Assembly) 

Complexity 

Failure  Rate 
(%/lOOO  Mrs) 

Failure 

Contribution  (%) 

20-30  Me  IF  Amplifier 

128 

0. 31465 

15.0 

1.  85  Me  IF  Amplifier 

104 

0. 22477 

11.0 

Audio  Amplifier 

117 

0. 01849 

2.0 

Spectrum 

59 

0. 17579 

8.0 

Power  amplifier 

110 

0. 22372 

11.0 

Modular 

47 

0. 10385 

5.  0 

Guard  receiver 

43 

0. 16229 

8.0 

Relay 

127 

0. 35654 

17.0 

Mechanical  drive 

11 

0.05930 

3.  0 

Oscillator 

17 

0.  13609 

7.0 

Rectifier 

68 

0. 09320 

4.0 

Power  supply 

21 

0. 00670 

0.  3 

Chassis 

19 

0. 18776 

9.0 

TOTAL 

878 

2. 0b315 

100% 

Note  that  the  analysis  indicates  that  the  relay  assembly  contributes  approxi¬ 
mately  17%  of  the  equipment  failures.  In  contrast,  the  power  supply  con¬ 
tributes  less  than  2%.  It  can  be  expected  in  this  instance  that  maintenance 
will  be  proportionately  distributed.  Further,  this  distribution  will  be  closely 
allied  with  the  number  of  tubes  used  in  each  case.  The  process  may  be  ex¬ 
tended  to  include  parts  in  each  assembly  or  unit  to  actually  select  the  high- 
failure  parts  for  scoring  of  maintenance  tasks. 
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.  b.  Logistics  and  Support 

Logistics  and  support,  while  not  a  direct  function  of  maintain¬ 
ability  design,  is  an  important  factor  in  maintainability  evaluation.  Infor¬ 
mation  relating  to  technical  personnel,  maintenance  levels,  and  spares 
provisioning  determines  the  analytical  approach  for  maintainability  evalua¬ 
tion.  Such  data  is  particularly  important  during  equipment  scoring  for  pre¬ 
diction  purposes.  In  the  AN/TSQ-47  program  logistics  and  support  informa¬ 
tion  is  available  through  various  studies  and  documentation  from  support 
•  groups. 


(1)  Technical  Personnel  Requirements  -  Quantitative  and  quali¬ 
tative  data  relating  to  technician  qualification  and  human  factors  considera¬ 
tions  establish  basic  premises  for  system  analysis  and  scoring.  ^  Through 
personnel  subsystem  documentation,  such  factors  as  maintenance  technician 
capabilities  and  manning  requirements  are  established.  In  the  maintain¬ 
ability  analysis  process,  these  factors  niust  remain  constant  and  be  stipu¬ 
lated  for  any  given  measurement.  The  average  maintenance  technician 
must  be  described  in  quantitative  terms.  For  example,  an  equipment  de¬ 
sign  characteristic  which  may  not  have  a  detrimental  effect  on  a  seven- 
level  technician  would  seriously  handicap  a  three-level  technician  When 
performing  maintenance.  This  would  be  reflected  in  higher  maintenance 
downtime  measurements. 

(2)  Human  Factors  -  Human  factors  requirements  indirectly 
reflect  the  design  considerations  for  maintainability.  Where  technical  per¬ 
sonnel  needs  are  jeopardized  by  restrictions  imposed  by  design,  human 
factors  and  maintainability  evaluations  tend  to  substantiate  and  verify  prob¬ 
lem  areas  discovered  on  an  independent  basis.  Actual  maintenance  techni¬ 
cian  requirements  are  outlined  in  the  Qualitative  and  Quantitative  Personnel 
Requirements  Plan  and  in  human  engineering  reports.  ° 

c.  Test  Equipment  and  Spare  Provisioning 

(1)  Supporting  Documents  -  Documentation  of  test  equipment 
and  test  procedures  is  given  in  the  Aerospace  Ground  Equipment  Plan.  9 
This  document  is  submitted  in  accordance  with  MIL-D-9412D.  It  outlines 
test  equipment  and  test  requirements  for  adjustment  and  repair  of  AN/ 
TSQ-47  equipment.  Test  equipment  requirements  are  presented  for  opera¬ 
tional,  organizational,  and  depot  maintenance.  Time  to  accomplish  specific 
tasks  are  provided  wherever  practical. 

(2)  Basic  Considerations  -  At  this  time,  establishment  of  spares 
provisioning  and  maintenance  level  concepts  has  not  been  completed.  Pend¬ 
ing  final  decisions  regarding  these  areas,  the  analysis  considers  require¬ 
ments  necessary  to  insure  system  operational  capability  regardless  of  the 
circumstances  involved.  Therefore,  the  analysis  reflects  the  inherent 
equipment  maintainability. 

EQUIPMENT  EVALUATION 


It  has  been  pointed  out  that  the  maintainability  analysis  of  the  AN/ 
TSQ->47  system  is  concerned  with  the  determination  of  indices  at  the  black¬ 
box  level.  These  indices  are  obtained  from  (1)  documentary  data  based 
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on  previous  equipment  usage  and  experience  and  engineering  estimates  and 
(2)  application  of  checklist  scores  to  the  prediction  technique.  Final  anal¬ 
ysis  is  made  in  conjunction  with  final  system  and  subsystem  tests.  Results 
provide  the  basis  for  establishing  system  maintainability  and  determining 
recommendations  for  design  improvements  for  future  systems.  Maintain¬ 
ability  concepts,  including  level  of  maintenance,  technician  requirements, 
and  spares  provisioning  are  reviewed  and  coordinated  with  appropriate 
groups  for  final  review  and  recommendations. 

a.  Maintainability  Analysis  Procedure 

The  objective  of  the  maintainability  analysis  is  to  determine  the 
average  active  downtime  for  each  equipment  in  the  AN/TSQ-47  system.  The 
term  active  downtime  is  used  to  signify  that  such  contingencies  as  ti waiting 
supply  action  and  administrational  functions  are  not  included  in  the  evalua¬ 
tion.  Average  downtime  is  expressed  in  terms  of  average  corrective  tasks 
and  average  preventive  tasks. 

(1)  Maintenance  Indices 

(a)  Corrective  Downtime  -  Corrective  downtime  is  associ¬ 
ated  with  the  occurrence  of  true  random  failures  and,  therefore,  is  a  func¬ 
tion  of  reliability.  It  is  the  time  required  to  diagnose  and  correct  an  equip¬ 
ment  malfunction  resulting  from  such  failure.  Corrective  downtime  may  be 
expressed  as  follows: 

=  average  corrective  downtime  per  task, 


=  total  corrective  downtime  for  all  tasks  under  con¬ 
sideration, 

=  number  of  corrective  tasks  based  on  occurrence  of 
true  random  failures. 


M  ^ 
rr  -  ct 
Met  -  TT" 
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M 


ct 


N 


(b)  Preventive  Downtime  -  Preventive  downtime  measures 
the  requirements  for  retaining  an  equipment  at  a  specified  performance 
level.  Preventive  maintenance  may  or  may  not  occur  during  an  operational 
period.  Preventive  downtime  may  be  determined  as  follows: 


where  M  =  total  downtime  for  all  tasks  under  consideration, 

pt 


N  =  number  of  preventive  tasks. 
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In  practice  preventive  tasks  often  involve  actions  to  achieve  optimum  equip¬ 
ment  performance  and  to  forestall  or  prevent  equipment  degradation.  Where 
maintainability  has  been  effectively  designed  into  equipment,  preventive 
maintenance  capabilities  are  substantially  improved.  Scheduling  for  per¬ 
formance  checkouts  and  adjustments  may  be  adjusted  to  meet  specific  niis- 
sion  requirements. 

(c)  System  Availability  -  Equipment  availability  may  be 
determined  by  considering  reliability  and  maintainability  numerics.  Avail¬ 
ability  is  expressed  by  the  following  formula: 

A.  =  - MTBF -  _  availability 

^  MTBF  + 


where  MTBF 


=  mean  time  between  failures, 


=  total  equipment  failure  rate, 

=  average  total  downtime  for  corrective  and  preventive 
maintenance  tasks. 


System  availability  is  a  probability  function  expressing  the  degree  of  certainty 
for  satisfactory  operation  in  a  given  time  period.  It  is  most  useful  for  such 
planning  purposes  as  establishing  mission  requirements ,  subsystem  utili¬ 
zation,  etc. 


(2)  Subcontractor  Reports  -  As  was  shown  in  Figure  2,  mainte¬ 
nance  indices  are  provided  by  the  contractor.  This  data  consists  of  correc¬ 
tive  and  preventive  time  estimates  for  newly  designed  modified,  and  exist¬ 
ing  equipments.  The  data  is  reviewed  and  summary  information  is  sub¬ 
mitted  to  the  System  Project  Office  with  any  problem  areas  and  recommenda¬ 
tions  for  design  changes.  Questions  regarding  the  nature  of  the  data,  in¬ 
tegration  and  clarification  are  referred  to  the  subcontractor  and/or  to  the 
cognizant  subsystem  engineer.  Where  scoring  data  is  in  suitable  form, 
maintenance  indices  are  developed  for  subsequent  system  analysis. 

(3)  Maintainability  Prediction  -  Principles  and  procedures  de¬ 
veloped  in  RADC-TDR-156  are  used  to  evaluate  maintainability  design  fea¬ 
tures  of  eachequipmer.t,  This  evaluation  provides  a  quantitative  evaluation 
of  the  inherent  maintainability  of  the  equipment  based  on  the  maintenance 
level  established  by  appropriate  concepts  for  the  AN/TSQ-47  system.  This 
prediction  is  accomplished  by  scoring  the  three  checklists  for  maintainability 
design  factors.  These  factors  are: 

a)  Physical  Design  (Checklist  A)  -  Access,  types  of 

fasteners,  packaging  test  points,  and  visual  displays 
are  among  the  factors  considered. 
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b)  Design  Dictates  -  Facilities  (Checklists)-  Design  re¬ 
quirements  for  test  equipment,  special  connectors, 
technical  assistance,  and  physical  equipment  arrange¬ 
ment  are  scored. 

c)  Design  Dictates  -  Maintenance  Skills  (Checklist  C)  - 
The  checklist  considers  the  design  requirements  for 
physical  strength,  logical  analysis,  and  memory. 

(4)  Scoring  -  The  prediction  technique  provides  that  certain 
criteria  be  used  to  score  each  question  (Checklist  A  has  15  questions, 
Checklist  B  has  7  questions,  and  Checklist  C  has  10  questions).  These 
criteria  are  applied  to  the  equipment  design  as  reflected  in  specifications, 
physical  layouts,  and  other  pertinent  documentary  data.  Each  checklist 
question  is  given  a  score  between  0  and  4  depending  on  the  degree  to  which 
the  equipment  design  meets  a  specific  maintainability  factor  (checklist 
question).  Figure  9  illustrates  a  number  of  design  factors  presented  in 
Checklist  A.  Note  that  such  maintainability  design  features  as  built-in 
monitoring  devices ,  quick-release  fasteners,  modular  construction,  and 
accessibility  enhance  the  maintainability  capability  of  the  equipment.  Scor¬ 
ing  may  be  carried  out  on  a  sufficient  number  of  tasks  to  establish  a  statis¬ 
tical  validity  to  determine  average  maintenance  time. 

b.  Preliminary  Findings 

Final  determination  of  the  maintainability  characteristics  of 
the  AN/TSQ-47  system  will  be  possible  at  the  completion  of  Category  II 
and  III  tests.  These  tests  will  be  performed  under  actual  end-use  condi¬ 
tions.  At  this  time  the  full  implication  of  the  design  principles  and  main¬ 
tenance  concepts  will  be  realized.  To  provide  an  insight  into  the  anticipated 
maintainability  capabilities  and  major  problems  resulting  from  the  integra¬ 
tion  and  use  of  equipment  programmed  for  each  system,  a  number  of  pre¬ 
liminary  findings  are  presented  here. 

(1)  Subsystem  Maintainability  -  Subsystem  analysis  considers 
the  interface  relationships  of  shelter  equipment  and  the  shelter.  Through 
the  analysis  it  is  possible  to  establish  the  time  requirements  for  mainte¬ 
nance  as  related  to  subsystem  malfunction  detection,  symptom  diagnosis, 
and  replacement  of  defective  equipment.  To  highlight  problem  areas  the 
analysis  is  based  on  the  worse  case  situation.  Scoring  is  predicted  on  this 
criteria.  Table  Z  summarizes  the  analysis  and  major  problem  areas  for 

a  number  of  subsystems.  The  maintenance  times  shown  indicate,  more 
realistically,  the  maximum  anticipated  downtime,  including  preventive  and 
corrective  tasks,  rather  than  average  values. 

(2)  Scoring  Results  -  In  Figure  10  the  actual  scoring  of  Check¬ 
list  A  is  presented.  A  score  of  zero  reflects  the  worse  case  condition  with 
the  major  problem  summarized  where  applicable.  Where  a  particular 
checklist  question  does  not  apply,  that  is  the  factor  does  not  constitute  a 
requirement  in  the  maintenance  scoring,  "NA"  is  noted  and  a  score  of  4 
is  given.  In  those  instances  where  insufficient  data  is  available  to  score 

a  particular  question,  "NS"  is  noted  and  an  average  question  score  is  de¬ 
termined.  In  subsequent  analysis  NS  scores  are  recorded  where  informa¬ 
tion  becomes  available. 
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Table  2.  Preliminary  Maintainability  Evaluation,  AN/TSQ-47  System 
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Figure  10 


CONCLUSIONS 


It  has  been  the  purpose  of  this  paper  to  describe  briefly  the  AN/ 
TSQ-47  maintainability  requirements  and  their  implementation.  In  accord¬ 
ance  with  the  system  specification,  a  maintainability  program  was  initiated 
detailing  the  analysis  to  be  accomplished.  Military  Specification  MIL-M- 
2651 2B  was  used  as  a  basic  guide  to  outline  the  steps  to  be  carried  out  dur¬ 
ing  the  program.  A  maintainability  guideline  was  prepared  outlining  sub¬ 
contractor  responsibilities,  method  of  data  analysis,  criteria,  essential 
terms  and  definitions,  and  data  reporting  procedures.  Maintainability  de¬ 
sign  considerations  affecting  maintenance  time  were  outlined  in  this  docu¬ 
ment.  Finally,  the  basic  steps  to  be  used  in  the  application  of  the  main¬ 
tainability  technique,  were  illustrated. 

a.  Status  and  Accomplishment 

As  part  of  the  design  approval  cycle,  analyses  of  equipment  and 
subsystems  have  been  carried  out.  Supporting  the  analyses  are  subcon¬ 
tractor  reports  submitted  in  accordance  with  data  reporting  requirements. 
Scoring  and  empirical  data  is  currently  being  prepared  for  the  determina¬ 
tion  of  applicable  indices  for  the  system.  Essential  tasks  accomplished  to 
date  are  described  below. 

(1)  Shelter  Evaluation  -  A  majority  of  the  subsystem  shelter 
interfaces  have  been  evaluated  and  scored  and  preliminary  downtime  esti¬ 
mates  have  been  calculated  for  worse-case  conditions.  Recommendations 
have  been  proposed  as  part  of  the  design  approval  submissions.  For  ex¬ 
ample,  it  has  been  recommended  that  operator  unattended  equipment  in  the 
control  tower  be  housed  in  a  separate  accessible  shelter  beneath  the  tower. 
Tjiis  arrangement  will  make  equipment  accessible  for  maintenance  and  pro¬ 
vide  greater  operator  movement  in  the  tower. 

(2)  Malntaii. ability  Prediction  -  Maintainability  pr edict! oVi  for 
a  number  of  equipments  has  been  completed.  Tasks  were  selected,  and 
scored  and  downtime  estimates  were  determined  for  the  prediction.  Prob¬ 
lem  areas  were  investigated  and  recommended  solutions  were  submitted 
as  part  of  the  design  approval  cycle. 

b.  Future  Needs 


Within  the  scope  and  time  scheduling  of  the  AN/TSQ-47  system, 
the  maintainability  program  has  effectively  achieved  its  primary  objective, 
i.  e.  ,  to  analyze  and  report  design  problem  areas.  It  has  provided  the 
necessary  guidance  to  establish  the  state-of-the-art  of  off-the-shelf  equip¬ 
ment  predominantely  used  in  the  system.  The  maintainability  evaluation 
has  provided  the  Air  Force  with  the  necessary  maintainability  improve¬ 
ments  for  future  procurements.  For  future  planning  the  following  sug¬ 
gestions  are  recommended: 

a)  Establish  Air  Force  and  contractor  policies  affecting 
spares  provisioning,  maintenance  levels,  and  tech¬ 
nical  personnel  requirements  prior  to  system  design. 
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b)  Develop  liaison  with  all  cognizant  groups  at  the  initial 
phase  of  the  program  that  will  continue  throughout  all 
phases. 

c)  Establish  maintainability  requirements  in  terms  of 
specific  tasks  to  be  accomplished  within  the  frame¬ 
work  of  contractual  needs,  time  scheduling,  and  costs 
at  the  time  of  contract  award. 
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SUMMAET 

The  techniques  and  controls  used  to  assure  spacecraft  mission  success 
through  BtalntaiMbility  in  product  assurance  programs  is  discussed.  The 
old  maintainability  concepts  for  weapon  systeiu  and  their  inadequacy  for 
manned  spacecraft  will  be  reviewed  brtefly.  The  maintainability  concepts 
for  manned  lunar  spacecraft  udiich  assure  the  maintenance  of  all  system 
functions  during  the  mission  will  be  examined.  These  concepts  will  permit 
achieveswnt  of  mission  success  idiich  approaches  lOOiC  with  hardware  having 
an  inherent  reliability  of  only  90^  to  95!^.  The  method  tdiereby  a  step-hy-step 
integration  of  these  maintainability  concepts  into  the  design  analysis  and 
review  and  subsequent  extension  into  the  test  and  redesign  activities  for 
verification  will  be  discussed  in  detail. 

PREFACE 

Maintainability  and  reliability  must  be  brought  together  through  a 
program  that  treats  reliability  as  the  sum  of  design  and  quality,  and  main¬ 
tainability  as  the  effective  consideration  of  the  man-machine  relationship. 

Reliability  (R)  is  the  probability  of  performing,  without  failure,  a 
specified  function  under  given  conditions  for  a  specified  period  of  time. 
Reliability  is  a  measure  of  the  time  stability  of  a  product's  performance 
and  is  sjqiressed  as  t  of  design  and  qpiality. 

Maintainability  (M)  is  that  quality  of  the  combined  features  of  equipment, 
design,  and  installation  >dilch  facilitates  the  accon^lishment  of  inspection, 
test,  servicing,  repair,  and  overhaul  with  miniiiniiii  time,  skill,  and  resources 
in  the  planned  maintenance  environment.  Quantitatively,  it  is  the  probability 
that,  when  specified  maintenance  or  replacement  action  is  taken,  the  system 
can  be  restored  to  a  satlsfactoxy  operational  condition  in  a  given  period  of 
time. 


The  concept  that  brings  these  elements  together  is  the  Product  Assurance 
program;  a  concept  that  provides  optimum  employment  of  design,  quality,  and 
maintenance  to  assure  the  maximum  probability  of  mission  success  (Sg|). 


Thus,  Sji  -  R  +  M 
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INTRODUCTION 


Manned  spaceflight  demands  a  first-flight  success  probability  of  88  to 
95  percent}  the  requirement  for  crew  siirvlval  approaches  100  percent.  These 
requirements  are  much  higher  than  the  achierenents  of  cosq>arable  systems  In 
the  past,  even  after  years  of  lnqprovemsnt  (Figure  l). 

Conversely,  increases  in  the  capability  and  complexity  of  equipment  have 
caused  the  burden  of  maintenance  to  Increase  at  an  even  greater  rate.  Thus, 
Increasingly  complex  maintenance  must  be  performed  on  Increasingly  conqpllcated 
equipment  to  enable  It  to  operate  for  longer  periods  of  time. 

DevelopsMnts  In  equipment  have  been  forced  Into  ndnlaturlsation  by  our 
propulsion  capabilities.  Miniaturisation,  with  reductions  in  equipment  weight 
and  site  with  thousands,  even  tens  of  thousands,  of  cco^nents  packed  into 
minimal,  space,  is  not  susceptible  to  maintenance,  and  yet  equipment  must  be 
maintained.  Further,  maintenance  of  the  manned  space  vehicles  will  have  to  be 
perfomed  \dille  the  vehicles  are  on  missions,  remote  from  earthbound  facilities. 

Mission  success  depends  on  (l)  quality  of  design,  (2)  quality  of  manu¬ 
facture,  and  (3)  quality  of  maintenance.  Man  in  the  system  augments  basic 
reliability  through  Innnlsslon  maintenance,  if  the  equipment  Is  designed  and 
arranged  to  e]q>loit  this  capability.  The  design  and  arrangement  of  equipment, 
and  the  jsrovislon  of  spares  and  tools,  must  be  conducted  on  the  basis  of  trade¬ 
offs  between  maintainability  and  reliability}  a  system  of  low  reliability  re¬ 
quires  more  maintenance,  and  vice  versa. 

Mission  success  probability  Is  involved  in  the  trade-off  of  apportioned 
reliability,  required  maintainability,  and  the  associated  factors  of  cost,  crew 
ability,  weight,  and  redundancy.  As  has  been  pointed  out,  a  aystem  of  low  re¬ 
liability  would  perform  adequately  if  subjected  to  extensive  maintenance.  A 
high  degree  of  Maintainability  would  be  required  to  p>exmit  this  extensive 
maintenance  -  l.e.,  great  quantities  of  spares,  a  large  inventory  of  tools, 
and  large  factors  of  access.  On  the  other  hand,  a  system  of  high  inherent  re¬ 
liability  would  require  little  or  no  maintenance,  and  therefore,  a  lower  Main¬ 
tainability  apportionment.  Mission  success  determinants  are  shown  in  Figure  2. 

It  should  be  noted  that  high  reliability  and  high  maintainability  are 
costly,  both  in  dollar  value,  and  otherwise.  Optimum  choice  of  a  maintain¬ 
ability  level  involves  the  resQlstlc  assessment  of  such  things  as:  the  state- 
of-the-art,  the  level  of  reliability  that  the  system  may  reasonably  be  ex- 
pected  to  maintain,  and  the  quantity  of  maintenance  required,  either  between 
failures  or  to  prevent  failure,  dtirlng  the  mlBslon. 

These  considerations  indicate  the  degree  of  maintainability  that  must  be 
provided  for  some  spwclfic  mission  success  probability.  A  certain  level  of 
in-mlsslon  maintenance,  determined  by  a  maintainability  requirement,  provides 
a  two-fold  cost  reduction,  through  reliability  within  the  state-of-the-art, 
and  maintainability  within  reasonable  weight  and  volume. 

The  product  of  the  assessment  is  an  i^jrovement  of  life  characteristics 
that  can  be  accom])lished  in  the  following  three  ways  (see  Figure  3): 

(l)  Use  of  redundant  c(aq)onents,  (2)  Throu^  maintenance  replacement  of  failed 
ccaqwnents  autoauitlcally  or  physically,  (3J  Periodic  servicing. 
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Reliability  and  maintainability  are  major  design  factors,  but  their 
achievement  is  not  a  factor  of  desi^,  alone.  If  this  was  the  case,  then 
the  problem  would  be  solved  after  ccmipletion  of  system  design.  However, 
the  pz^>blem  continues  through  production,  delivery,  installation,  and 
operation.  Consequently,  the  usual  method  has  been  to  seek  maintainability, 
and  thus  reliability,  during  system  operation.  Because  the  iiq>rovament 
program  are,  in  a  sense,  maintenance,  they  should  also  be  planned  and  de¬ 
signed  into  the  systems  at  the  beginning. 

A  more  effective  approach  to  the  problem  is  through  a  Product  Assurance 
program  that  establishes  the  organisation,  plans,  and  procedures  to  assure 
that  equipments  are  designed  to  achieve  the  required  level  of  reliability, 
maintainability,  and  performance,  and  that  these  qualities  are  maintained 
throughout  production  and  operation.  Unless  there  are  dramatic  bre£dc 
throughs,  there  will  be  no  significant  upgrading  of  system  reliability;  it 
will  not  be  adequate  for  extended  manned  space  flight  in  the  near  future, 
in-mlsslon  maintenance  sill  be  necessary  to  assure  mission  success. 

MAIMTAINABILITr  APPROACH 


Let  us  reiterate  the  classical  definition  of  reliability  concerning 
something  doing  what  it's  supposed  to,  where  and  vdien  it's  wanted  to. 

It  is  to  this  end  that  reliability  must  be  maintained.  Maintenance  is  the 
act  of  assuring  mission  success,  and  maintainability  is  the  provision  for 
it  (see  Figure  4). 

Replacement  of  components  raises  reliability  to  an  amount  equal  to,  or 
slightly  above,  the  wearout  failure  probability.  During  a  mission,  there  are 
specific  periods  »d»en  the  various  prime  equipments  must  operate,  and  other 
periods  vdien  the  equipments  are  not  needed.  Since  time  is  required  to 
acccmpllsh  maintenance,  the  required  operating  time  of  the  prime  equipment  is 
also  a  criterion. 

A  maintenance  operation  consists  of  detection,  identification,  isolation, 
and  application  of  the  corrective  measures  necessary  to  restore  or  maintain 
.eqiiipinent'  in  an  operating  condition.  The  degree  of  mechanisation  to  be 
utilised  in  accon^lishlng  all  or  part  of  the  maintenance  operation  requires 
consideration  of  the  human  factor,  as  well  as  the  practical  limits  of  design, 
reliability,  and  quality. 

Mission  success  is  the  final  mea3\u’e  of  the  proficiency  of  design,  the 
quality  of  materials  and  manufacture,  and  the  adequacy  of  maintenance. 
Although  design  and  quality  are  carried  through  into  equipment  operation, 
maintenance  or  lack  of  maintenance,  is  the  only  factor  that  can  modify  the 
affects  of  design  and  quality  sifter  launch.  In  turn,  msdntsdnability  is  a 
measiure  of  the  degree  to  vdilch  maintenance  csm  be  acconqplished. 

The  reliability,  qusdity  provisions,  and  potentis^.  maintainability  of  a 
design  are  subject  to  ansJysls  and,  because  they  are  so  closely  related,  are 
sdjunctlve.  Analysis  for  these  qualities  can  best  be  acccoqplished  in  rela¬ 
tion  to  mission  phase,  and  further  broken  down  into  sepsurate  equipment  items, 
their  functions,  the  oversdl  affects  of  failure,  smd  the  corrective  design 
action  to  be  tsdcen  in  order  to  nmke  the  equipment  as  reliable  as  possible 
within  cost  limitations.  Having  established  levels  of  reliability  and 
quality,  analysis  for  maintenance  and  maintainability  then  becomes  the  prime 
determinant  of  continued  mission  effectiveness  and  success. 
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Necessity  for  New  Approach 

Manned  space  efforts  to  date  have  consisted  of  earth  orbital  flights 
of  relatively  short  duration.  Projected  programs  Include  long  term  space  ex¬ 
ploration  vdth  space  depots,  resupply  points,  rescue  craft,  and  maintenance 
station.  Perhaps  eventually,  the  "comer  gas  station"  vd.ll  exist  In  space, 
and  In-f light  maintenance  vdll  be  a  problem  of  little  magnitude. 

For  the  next  fevr  years,  hovrever,  man's  contribution  to  mission 
success,  after  launch  frcan  earth,  vd.ll  be  limited  to  those  functions  contained 
vdLthln  the  spacecraft,  as  supported  by  earth  facilities  for  communications, 
tracking,  trajectory  prediction,  and  telemetrlc  analysis  of  equipment  per¬ 
formance. 


Implementation  of  Nev/  Concents 

In  the  approach  to  application  of  an  integrated  Product  Asswance 
program,  tvro  general  divisions  of  the  total  effort  may  be  made.  One  Is 
primarily  associated  vdLth  engineering;  the  other  vd.th  quality  control,  and 
manufacturing  or  produclblUty.  This  division  In  no  vray  implies  that  the  tv«o 
efforts  are  sequential  In  time.  Both  must  be  an  integrated  activity  beginning 
vdth  initial  design  and  continuing  through  to  the  final  {dvase  of  production. 
Close  coordination,  both  formal  and  Informal,  must  be  effected  betvreen  all  con¬ 
cerned  units.  Informal  coordination  Is  a  function  of  the  organisational 
structure,  character  of  personnel,  motivation,  and  training.  Formal  coordina¬ 
tion,  final  evaluation,  and  direction  of  the  concerned  activities  must  be 
accomplished  through  program  management  and  a  design  revlevf  board  vested  vdth 
sufficient  authority  to  implement  the  recommendations  contained  in  the  analyses 
of  reliability,  maintainability,  quality  control,  produclblUty,  operability, 
safety,  and  value. 

With  this  type  of  product  assvurance  program,  the  necessary  design 
margins  are  established,  and  controls  are  Initiated  to  maintedn  the  required 
ultimate  mean  strength,  and  to  limit  variance  of  the  produced  hardvmre.  The 
cost  and  calender  payoff  ccaies  especially  In  the  fields  of  analysis  and  test¬ 
ing  -  qualification  and  verification.  Overall  product  Integrity  Is  achieved 
vdth  a  considerable  reduction  in  cost  (see  Figure  5). 

TIME  CONSIDERATIONS 

The  problems  of  maintainability  are  associated  vdth  time.  This  Includes 
mission  duration,  and  the  time  available  to  perform  the  maintenance  operations. 
Mission  duration  Is  measured  In  hours  or  days,  vdille  that  of  the  future  may  be 
measured  In  vreeks,  months,  and  eventually,  even  In  years.  Therefore,  In  manned 
space  operations  vdth  long  ml.sslon  dvirations,  representative  functions,  such  as 
allowable  systems  maintalnab5JJ.ty,  standby  redundancy,  frequency  of  maintenance 
cycles,  and  efficiency  of  life  support  equipments,  are  fundamental  to  equipment 
survival.  Redundancy  Is  one  ansvrer  to  the  problem  of  maintenance,  since  failure 
of  individual  units,  and  combinations  of  units,  often  results  in  a  degradation 
of  ^stem  performance,  rather  than  complete  mission  failure.  For  exaaqvle.  If 
tvfo  povrer  supplies  are  enjoyed,  the  failure  of  either  one  vdll  degrade  the 
system  output  capability,  but  the  significance  of  the  failure  can  be  regarded 
as  a  system  performance  con^promlse,  rather  than  as  a  mission  failure. 
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Operational  modea  for  a  manned  space  vehicle  of  the  near  future  will 
probably  include  launch,  orbit,  ejection  from  orbit,  a  trans-spatlal  phase, 
orbit  an4/or  landing  tqpon  the  intended  celestial  bo^,  and  a  return  flight. 
These  inodes  may  be  followed  bgr  direct  reentry,  and  after  touchdown,  final 
eommunleatlons  requirements.  Aastanlng  that  the  laxmch  and  orbital  phases 
are  successful,  the  operational  sequences  associated  with  mission  success 
are  dependent  vpon  design  for  maintainability.  Figure  6  illxistrates  mission 
success  as  a  function  of  maintained  reliability  for  the  ay  stem.  At  the 
present  time,  the  representative  reliability  requirement  for  the  operational 
phases  of  a  manned  space  vehicle  may  be  estimated  by  assuming  operaticinal 
life  requirements  ranging  from  500  hours  to  perhaps  10,000  hours  for  all  the 
aystems  of  the  aerospace  vehicle. 

Assianing  a  sxiccessful  launch  operation,  the  operational  sequence  associ¬ 
ated  with  mission  success  is  dependent  iq>on  crew  operations  and  the  stqiplles 
at  hand.  As  an  exaiqile,  let  us  assme  a  10,000  hour  operational  requirement, 
and  study  the  mission  success  as  a  function  of  (,  vhere  represents  the  pez*- 
lodlc  maintenance  for  an  attended  aystem.  Ihe  probability  equations  of  a 
maintained  ey*^^  derived  from  the  following  state/apace  diagram,  udiere 
the  ayotem  operational  state  (Eg)  and  inoperatlonal  state  (E^)  are  the  trans¬ 
fer  functions  with  respect  to  eystem  operating  time  (T). 


When  the  operational  life  requlrmnent  is  10,000  hoturs,  with  an  antic¬ 
ipated  malntenaxiee  ^cle  ec[ual  to  ^  and  j  of  the  10,000  hours  opera¬ 

tional  requirement,  the  maintained  aystem  reliability,  as  a  function  of  eystem 
operating  time  is  shown  in  Figure  6. 
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Tlie  calculated  reliabilities  associated  vd.th  the  depicted  mission  time  shown 
In  the  Illustration  are  based  on  the  analyses  given  below. 

When  the  systems  are  operating  at  time  (T),  the  probability  that  seirvlce 
or  periodic  malnteiumce  will  be  required  before  time  (T  +  h)  Is  6h  +  0(h);  If 
the  systems  are  being  serviced  or  repaired  at  time  (T),  the  probability  that 
the  service  time  will  terminate  before  time  (T  +  h)  and  be  restored  to  the 
correct  operating  state  Is  Ch  +  0(h),  since  the  systems  under  consideration 
can  be  In  one  of  the  two  possible  stages  at  time  (T)  -  the  operational  state 
(Eg)  or  the  Inoperative  state  (Ef). 

The  state  of  the  systems  at  time  (T)  can  be  described  by  two  peurameters, 

6  and  The  state  associated  with  the  passage  of  the  events  from  Eg  to  Eg 
and  Eg  to  E^  Is  represented  by  parameter  6. 

When  the  event  of  the  system  starts  at  Eg^  at  time  (T^ ).  the  waiting 
time  up  to  the  first  passage  throxigh  Efj  at  time  (Tj,  Tj  >Tj^),  can  be  describ¬ 
ed  b7  the  exponential  probability  distribution: 

R(t)  =  e-^ 

because  the  likelihood  of  system  malfunction  Increases  with  mission  time  with¬ 
out  maintenance.  When  maintenance  Is  an  Integral  part  of  the  manned  opera¬ 
tions  of  the  spacecraft,  parameter  associated  with  the  passage  from  E^  to  Eg 
will  also  have  a  probability  distribution  to  describe  the  maintenance  tasks. 

Analyses  Indicate  that  parameter  Ct  associated  with  the  passage  from 
Ef  to  Eg,  is  best  described  by  the  exponential  probability  distribution, 

Pr('t)  =  e“Cr,  so  that  the  delayed  passage  from  Ef  to  Es  at  time  (T)  may  be  In¬ 
vestigated  In  greater  detail. 

The  probability  for  any  system  of  the  spacecraft  to  remain  operating 
successfully  during  the  time  interval  (T,  T  +  h)  with  maintenance  is: 

^saC^  +  h)  =  (1  -  8h)  Pgg(T)  +  Ch  Pgf(T)  +  0(h) 

Since  Pj  ^  is  the  probability  that  if  the  systan  is  in  state  (Ej^),  it  will  be 
in  E.  T^time-units  later,  the  reliability  level  of  any  system  Is  represented 
by  the  linear  differential  equation  given  below. 


Pg;(T)  =  -  0  Pgg(t)  +  C  Pgf(T) 

Solutions: 

Ps8(t)  +  Pgf(t)  =  1,  P8f(t)  =  1  -  Pgg(t),  Pig(t)  =  0  Pgg(t)  + 

c  [1  -  Pgg(t)]  ; 

P^g(t)  =  -  0  Pgg(t)  +  C  -  C  Ps8(t) 

Therefore: 

Pg8(t)  =-  (0+C)  Pa8(t)  +C 

So  that: 

PssCt)  =  c  +  ce-(fl  +  0  t/e  +  b/C 

But: 

P(0)  =  1  and  c  =  0 
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Therefore: 

P88(t) 

0  +C 
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Design  Analysis 

Maintenance  demands  on  the  tine  and  ability  of  the  crew  must  be 
correlated  with  other  performance  requirements  and  considered  In  the  design 
analysis.  A  preliminary  configuration  Is  then  established  which  has  re¬ 
dundancy  and  altei*nats  modes,  considering  in  the  loop  as  necessary  for 
override  functions,  switching  activities,  and  assumption  of  automatic 
functions  that  are  within  the  capabilities  of  the  crew.  This  increases  the 
reliability  of  the  spacecraft,  but  places  additional  reqiilrements  on  the 
in-mission  flight  crew.  These  requirements  must  be  considered,  together  with 
the  normal  flight  crew  operational  functions,  by  constructing  a  flight  time 
line  event  chart  (Figure  7)  vdilch  includes  all  spacecraft  and  subsystem 
functions,  and  individual  activities  which  must  be  performed  for  each  space¬ 
craft  operation. 

MAINTAINABILITr  DESIGN  CONCEPTS 


The  amount  of  maintenance  the  astronaut  Is  capable  of  performing  during 
the  mission  Is  the  major  consideration,  and  is  the  factor  used  to  make  deter¬ 
minations  of  automatic  versus  manual  maintenance,  or  detenninations  of  re¬ 
dundancy  versus  weight,  complexity,  or  criticality.  These  determinations, 
in  turn,  define  the  design  goals  for  maintainability. 

Having  established  maintainability  goals,  the  designer  then  breaks  them 
down  into  specific  design  problems  based  on  the  analyses  shown  in  Figure  8. 

As  the  analysis  breaks  down  the  maintainability  reqviirements  Into  individual 
design  problems,  some  trade-offs  are  reqiilred.  Features  having  a  primary 
function  In  performance  must  be  evaltiated  in  terms  of  maintainability,  and 
conversely,  maintenance  features  must  be  evaluated  in  terms  of  reliability, 
performance,  producibility,  and  other  design  goals  (see  Figures  9,  10,  11, 
and  12). 

These  same  req;iirements  for  designed  maintainability  apply  equally  to 
ground  equipment  and  to  mission  equipment.  On  the  ground,  the  degree  of 
system  readiness,  and  the  amount  of  system  wearout,  is  governed  by  the  length 
of  checkout  operations  and  by  the  amotmt  of  system  exercising  during  checkout. 

As  maintenance  begins  on  the  ground,  and  the  level  of  in-^ssion  main¬ 
tenance  is  peurtlally  determined  by  the  degree  of  readiness  and  systems  wear¬ 
out  at  the  time  of  liftoff,  ground  equipment  must  also  be  designed  for  ease  of 
maintenance  by  providing  adequate  checl^ints,  easy  accessibility  of  com¬ 
ponents,  marking  and  color  coding  of  parts,  and  human  engineering  of  displays 
and  controls.  Improvements  in  maintainability  can  be  obtained  by  designing 
the  support  equipment  to  increase  the  accuracy,  speed,  and  reliability  of 
the  maintenance  operations.  Efficient  autonatlc  checkout  equipment  reduces 
troubleshooting  time,  and  therefore,  reduces  the  total  maintenance  time.  The 
rapid  and  efficient  performance  of  in-mission  maintenance  is  even  more  de¬ 
pendent  upon  this  designed  maintainability  -  the  provision  of  color  coding, 
check-points,  accessibility,  and  con^ct,  easily-stored  technical  materials 
and  information  for  the  maintenance  operations. 

Maintainability  is  a  characteristic  of  design,  and  must  be  accomplished 
in  design,  or  in  design-related  processes.  Design  for  maintainability,  then, 
must  have  the  following  major  aspects:  Man's  role  in  maintenance  must  be 
considered  as  an  integral  part  of  the  system.  The  design  must  be  based  upon 
maintenance  performance  specifications  that  provide  the  designer  an  under- 
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standing  of,  euid  some  degree  of  control  over,  the  participation  of  man  in 
this  S7stem.  The  design  must  provide  those  structural  features  that  are 
f  necessary  to  allow  and  facilitate  this  participation.  Access  provisions, 
work  clearances,  test,  €md  service  points  eure  examples  of  maintainability 
design  areas.  The  design  must  also  dictate  the  critical  characteristics  of 
supplementary  equipment.  Job  aids,  and  Job  supports  which  are  vital  and  in¬ 
tegral  to  the  participation.  Finally,  the  design  must  anticipate  and 
ccmpensate  for  variations  in  this  participation.  The  design  must  make 
further  compensations  for  In-misslon  maintenance,  vdiere  the  astronaut  must 
use  and  maintain  the  equipment  at  the  same  time.  Design  for  in-mlssion 
maintainability  must  make  considerable  allowances  for  the  limitations  im¬ 
posed  upon  the  astronaut  by  the  environmental  envelope  vdiich  imposes  the 
necessity  that  he  wear  a  space  suit,  or  limits  his  ability  to  use  tools  in 
a  weightless  condition. 

Application 

Replacement  is  the  most  common  type  of  repair.  It  can  be  accom¬ 
plished  in  many  ways,  ranging  from  active  redundancy,  through  completely 
automatic  and/or  manual  switching  of  redundant  Inventory,  to  manual  re¬ 
placement  at  all  equipment  levels.  When  redundancy  is  used,  it  can  arnoimt 
to  as  much  as  a  30  percent  increase  in  total  system  weight.  It  is  also 
necessary  to  increase  the  payload  weight  so  that  other  maintenance  subsystems 
can  be  carried.  Naturally,  this  Increase  can  be  minimised  by  component 
selection  and  stringent  quality  control  and  testing  requiresients. 

Component  failures  usually  result  from  deterioration  due  to  manu- 
factirring  imperfections,  therefore,  these  faults  can  be  detected  by  monitoring 
the  performance  of  the  components,  and,  through  testing,  accurately  determin¬ 
ing  those  components  truly  susceptible  to  failure.  Redundancy  in  storage 
spares  can  then  be  minimised,  and  through  the  efforts  of  the  hxmian  subsystem, 
the  In-vission  reliability  maintained  at  a  high  level. 

Prediction  and  Measurement 


Mission  reliability  can  be  predicted  as  the  proportion  of  time 
that  either  the  human  or  the  hardware  systems  operate  within  tolerance  when 
exposed  to  proper  Inputs.  Human  subsystem  reliability  coefficients  can  be 
mathematically  treated,  together  with  hardware  coefficients.  However,  some 
measure  of  the  variability  of  human  performance  in  the  intended  design  is 
required  to  accomplish  this  condition. 

Human  performance  for  the  Intended  design  can  be  measured,  under 
controlled  conditions,  to  yield  the  statistics  necessary  to  develop  the 
reliability  coefficients,  through  the  use  of  full  scale  mock-ups.  These 
mock-ups  bear  little  hardware  realism,  but  if  designed  with  care,  they  can 
be  psychologically  meaningful  enough  to  run  human  subjects  throu^  them 
with  confidence.  Given  adequate  statistical  and  ejqwrimental  control, 
research  can  use  these  mock-ups  to  optimise  the  design  before  drawing  re¬ 
lease,  and  thus  achieve  high  human  reliability. 

An  equation  for  predicting  total  maintenance  time  is  an  important 
step  toward  determining  an  ideal  predictor  of  maintainability.  The  next 
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logical  steps  are  to  Increase  the  nxmber  of  staridard  replacement  times 
available,  and  to  validate  and  refine  the  technique  by  using  it  for  predic¬ 
tions  on  systems  other  than  the  one  on  vdiich  it  was  developed.  The  ability 
to  use  a  system  or  component  at  the  time  desired  to  perform  the  required 
function  is  a  primary  goal  of  all  operations  aboard  a  spacecraft.  Within 
certain  limitations,  such  equlpownt  may  deteriorate,  and  yet  permit  per¬ 
formance  of  a  desired  task,  or  continuation  of  a  task,  or  all  of  an  Intended 
mission.  Performance  within  such  limitations  can  be  defined  as  effective, 
and  effectiveness  is  defined  as  a  degree  of  real  success  of  the  actual 
mission,  compared  to  the  achievements  planned  for  the  mission.  Some  of  the 
levels  of  effectiveness  are:  task  accomplishment  within  the  required  time, 
task  acooinq;)lishment,  but  over  a  longer  period  of  time,  task  failure,  but 
accomplishment  of  remaining  mission,  and  malfunction  and  mission  failure, 
but  crew  survival.  Zero  effectiveness  muld  be  at  the  level  of  complete 
mission  failure  with  loss  of  the  crew. 

Given  adequate  treatment,  maintainability  can  be  treated  as  re¬ 
liability,  or  in  a  similar  manner.  Since  z>ellability  and  maintainability 
are  becoming  equally  important  characteristics,  it  is  essential  that  they  be 
accorded  similar  treatment.  As  with  reliability,  some  yardstick  for  the 
measurement  of  maintainability  is  needed.  It  is  essential  that  some  nu¬ 
merical  requirement  be  ultimately  established,  otherwise,  it  would  be  no 
more  useful  to  require  that  equipment  be  maintainable  than  to  require  that 
an  automobile  be  fast.  The  words  "fast"  and  "maintainable"  can  mean  mai^ 
things  to  many  people.  Unfortunately,  it  is  unlikely  that  many  of  these 
people  would  be  in  complete  agreement  if  each  were  permitted  to  supply  his 
own  interpretation.  This  requirement  for  assigning  numeric  value  as  a 
measure  of  maintainability  goes  even  further.  If  we  are  to  assign  a  value, 
the  characteristic  of  maintainability  must  be  measureable  and  demonstrable. 
The  ability  to  state  a  numezical  requirement  is  of  little  value  if  it  is  not 
possible  to  subsequently  determine  whether  or  not  this  requirement  has  been 
met.  This  characteristic  of  maintainability  must  be  predictable,  or  it 
would  be  most  difficult  for  a  contractor  to  propose  production  of  a  piece 
of  equipment  >dien  he  is  unable  to  estimate,  in  advance,  his  ability  to  pro¬ 
vide  the  required  levels  of  maintainability.  Presently,  the  parameter  vdiich 
shows  the  greatest  promise  as  an  adequate  measure  of  omintainabllity  is 
time  -  the  time  required  to  restore  equipment  to  operating  conditions  follow¬ 
ing  a  failure.  Time  may  be  a  satisfactory  choice,  in  that  it  can  be  treated 
quantitatively,  measured,  and  to  some  extent,  predicted.  However,  time  is 
not  the  only  conceivable  unit  of  measurement,  euid  in  fact,  may  not  be  the 
most  satisfactory.  For,  while  measured  performance  times  may  reflect  some¬ 
thing  wrong  in  the  performance  of  a  certain  maintenance  task,  the  time 
measurements,  along,  cannot  Indicate  the  root  of  the  problem,  or  the  answer 
to  the  problem. 

RELIABILrnr  through  maintenance 


Reliability  figures  for  space  equipment  are  critically  dependent  on  an 
exact  niffliber  of  operations,  or  hours  of  use,  vdien  operating  close  to  design 
operating  life.  Sensitivity  of  reliability  figures  to  duration  of  operation 
is  highly  magnified  in  equipment  «dich  is  designed  for  such  factors  as 
optimum  packaging  and  power  consumption.  As  an  example,  let  us  assume  a 
vehicle  in  earth  parking  orbit:  A  failure  has  occurred  in  the  caamnuica- 
tions  link  to  the  earth  base.  Just  parlor  to  ejection  from  orbit.  The  many 
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obvious  mjfB  In  inrhich  this  could  affect  the  mission  must  be  considered 
against  the  possibility  of  (l)  continuing  the  mission  vd.thout  use  of  this 
equipment,  (2)  increasing  the  time  in  orbit  by  performing  maintenance  be¬ 
fore  proceeding,  thereby  Jeopardising  the  reliability  of  other  systems, 

(3)  postponing  the  maintenance  to  another  phase  of  the  mission,  (4)  con¬ 
tinuing  the  mission,  but  omitting  the  ^ases  of  the  mission  made  harardous 
the  malfunction  of  this  equipment,  (5)  aborting  the  mission,  or  (6)  some 
other  combination  of  the  many  available  choices. 

The  probability  of  various  failures  and  their  impoi*tance  to  the  mission 
must  be  considered  in  early  mission  prograomlng.  With  this  information  we 
can  evaluate  the  requirements  for  spares,  maintenance  equipment,  skills, 
and  training  needed  for  the  crew.  Han's  optimum  use  in  space  can  be  ob¬ 
tained  only  if  the  mission  program  logic  contains  all  of  these  factors, 
in  addition  to  the  various  system  and  goal  interrelationships. 

Although  equipment  might  not  be  guaranteed  against  failure  during  the 
required  operating  period,  it  can  be  so  constructed  that  after  a  failure, 
it  can  be  quickly  restored  to  the  required  operating  condition.  Success 
in  this  direction  would  inqirove  the  overall  ability  of  the  equipment  to  per¬ 
form  the  function  for  vMch  it  was  designed,  since  it  would  be  available  for 
use  for  a  greater  proportion  of  time.  The  major  products  of  maintainability 
can  be  defined  as  follows: 


Operational  Readiness 


Mission  Reliability 


Design  Adequacy 


The  probability  that  the  system  will 
be  ready  to  perform  when  called  upon 
to  do  so. 

The  conditional  probability  that 
the  system  will  continue  to  perform 
satisfactorily  for  the  duration  of 
the  mission,  given  that  it  was  in 
satisfactory  operating  condition  at 
the  beginning  of  the  mission. 

The  conditional  probability  that 
the  ^stem  is  able  to  accomplish 
its  mission,  given  that  it  is 
operating  properly. 


Using  these  definitions  and  others,  maintainability  requirements  can  be  im¬ 
posed,  and  a  Product  Assurance  program  maintained.  A  desired  maintainability 
characteristic  can  be  assured  in  the  product  through  the  use  of  adequate 
specifications  and  design  techniques  for  maintainability. 


The  Human  Element 


Maintainability  deals  not  only  with  time  and  the  availability  of 
spares,  but  with  scientific  psychology,  physiology,  and  psycho-dynamics. 
Thus,  a  major  influence  on  the  time  required  to  repair  equipments  is  the 
ability  or  the  attitude  of  the  astronaut  on  extended  space  missions.  There 
may  also  be  ptroblems  of  perception,  attention,  or  of  reason  itself.  The 
long  term  effect  of  Journeys  into  the  far  reaches  of  space  is  naturally  a 
subject  on  tdilch  we  are  almost  totally  lacking  in  data. 
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Training  and  experience  have  a  considerable  effect  on  lowering  the 
troubleshooting  time  on  a  given  piece  of  equipment,  and  can,  in  time,  com¬ 
pensate,  to  a  considerable  degree,  for  a  lack  of  design  for  malntainabillt7. 
Consider  however,  the  time  saved  during  the  tralnlmg  C7ele  if  the  equipment 
is  designed  for  malntalnablUtj  in  the  beginning. 

VERIFICATION 


The  test  program  provides  a  means  of  verifying  the  results  of  the 
design  phase  -  the  degree  to  vdilch  rellablUtj  and  maintainability  have 
been  Incorporated  Into  the  system.  The  test  program  should  not  be  con¬ 
sidered  as  merely  a  test  of  the  hardware;  it  is  really  a  test  of  systems 
and  subsysteais.  Man  is  considered  a  subsystem,  so  the  testing  must  Include 
the  human/hardware  relationships. 

To  correlate  the  capabilities  of  design  and  man,  and  the  interface  prob¬ 
lems  Involved,  extensive  simulation  techniques  should  be  utlUied.  Simu¬ 
lation  has  two  purposes.  One  Is  to  provide  verification  of  design;  the  other 
is  to  provide  crew  training.  Simulation  is  the  best  means,  short  of  an  actual 
mission,  of  approximating  mission  conditions,  including  the  element  of  time. 

Equipment  utlliced  for  simulation  may  range  from  the  subsystem  level  to 
a  replica  of  the  spacecraft.  Program  costs  and  schedules  will  determine  the 
extent  of  the  simulation  program.  Obviously,  mors  useful  data  will  be  ob¬ 
tained  if  the  simulation  closely  approximates  the  conditions  and  equipment 
to  be  encountered  in  the  actual  mission.  It  may  be  necessary  to  use  pro- 
cedwe  trainers  representing  a  particular  system  and  so  arranged  as  to  be 
similar  to  the  spacecraft  Installation.  In  any  event,  simulation  must 
provide  opportunity  for  the  crew  to  operate,  adjust,  and  repair  the  subsystems 
as  thsy  wotld  in  flight.  Means  will  be  prodded  to  introduce  fallvures  into 
the  system  vdilcb  require  crew  action  to  maintain  or  restore  system  functions. 
This  provides  a  measure  of  the  adequa^  of  detection  systems,  and  of  the 
ability  of  the  crew  to  function  as  Intended.  If  the  test  is  conducted  over  an 
appHTeclable  time  period  and  correlated  with  other  crew  responsibilities,  it 
establishes  an  indication  of  the  practicability  of  crew  asslgimients  and  answers 
questions  concerning  whether  or  not  the  crew  has  been  overloaded.  Finally,  it 
establishes  e  tool  to  check  design  and  maintenance  aneOyses  relative  to  the 
maintainability  and  repairability  of  equipment  -  the  accessibility  of  ccmt- 
ponents,  ease  of  adjustment  or  repair,  and  the  time  emd  effort  Involved  in 
rejilacement  of  modules. 

In-Fllp[ht  MAlirtvalnabilitv  Considerations 

At  this  px3int  in  the  discussion,  especially  with  awareness  of  the 
state-of-the-art,  it  is  obvious  that  reliability,  per  se,  is  not  assurance 
Of  mission  success.  Success  is  achieved  only  through  the  factors  associated 
with  the  maintenance  of  system  functions.  There  are  special  considerations 
to  be  given  to  design  and  other  Frep>aratlons  for  In-mlsslon  maintenance  (Fig. 13) 
operation  problems  and  pjarameters  must  be  taken  into  consideration.  Every 
procedure  must  be  thoroughly  veGAdated  before  it  is  Incorporated  into  mainten¬ 
ance  instructions.  Every  conceivable  requirement  for  inspection  and  handling 
of  emergency  conditions  must  be  thought  of,  and  parocedures  developed  for 
them.  Consideration  must  be  given  to  pirovldlng  the  maintenance  system  with 


..IVC-11 


adeqiiate  procedures  for  determitiing  that  the  system  has  been  repaired  and 
is  again  ready  for  use.  Special  thought  must  be  given  to  compression  and 
condensation  of  technical  data,  without  reduction  in  Its  usefulness.  Re> 
placement  parts  and  conqscnents  must  be  adequately  identified  In  a  uniform 
manner.  Repair  information  must  be  either  coiq>letely  displayed  on  the 
equipment,  or  provided  conq;iletely  in  the  technical  data;  not  mixed  between 
the  two.  A  system  of  logical  relationships  on  part  names  and  numbers  should 
be  established.  Required  tools  must  be  kept  to  a  minimum  and  should  either 
be  cannon  hand  tools,  or,  if  experience  dictates,  hand  tools  designed 
especially  for  use  by  man  wearing  a  space  suit.  Equipment  must  be  designed 
so  that  connectors  can  be  easily  distinguished.  Cables  must  be  of  a  length 
that  reaches  to  one  point  only.  If  hardware  mlxup  is  still  possible, 
different  types  of  receptacles  must  be  used.  Interchangeability  should  be 
developed  to  a  high  degree;  modules  containing  set  patterns  of  various 
components  that,  vdien  connected  in  different  ways,  perform  different  functions, 
would  greatly  slmplliy  ln>mlssion  maintenance.  In  conjunction  with  this,  of 
course,  the  maintenance  technical  data  would  contain  specific  Instructions 
for  connecting  a  universal  modiile  to  perform  a  given  function. 

Because  maintainability,  operability,  and  reliability,  although 
not  synonymous  terns,  are  closely  allied,  they  can  best  be  performed  by 
closely  coordinated  effort  within  one  completely  responsible  organisation. 

To  be  most  effective,  maintenance  engineering,  reliability,  human  engineering, 
and  the  other  factors  of  maintainability  -  l.e.,  operations  euialysis,  should 
be  performed  concurrently  and  cooperatively  id.th  truly  effective  liaison  with 
eqiilpment  designers. 

Just  as  we  at  the  Space  &  Information  Systems  Division  of  North 
American  are  utilizing  design  reliability  analysis  and  design  reliability 
review,  so  then,  do  we  anticipate  the  need  for  design  maintainability  analysis 
and  review.  As  with  our  reliability  engineering  efforts,  vre  recognize  that 
these  maintainability  groups  must  be  project  oriented  and  endowed  with  the 
authority  to  review  design  drawings  and  develop  models,  to  effect  these  as 
necessary  to  inswe  maintainability  of  the  final  product.  We  recognise  that 
for  In-mlsslon  maintenance,  design  must  be  oriented  for  maintenance,  especially 
in  the  weightlessness  of  space  vdiere  there  are  problems  of  perception,  size 
and  mass  eoiq>arlson,  strength,  and  facility,  that  require  special  attention. 

We  also  recognized  that,  management-wise,  the  c\u*rent  real  problems 
of  maintainability  are  a  general  lack  of  respect  for  professional  competence 
between  design  groups  and  others  -  i.e.,  reliability,  maintainability,  and 
value.  There  is  also  a  problem  of  eoiaiiunications;  many  specialist  groups 
assume  their  functions  to  be  esoteric  and,  therefore,  deliberately  mlniMze 
their  contact  with  other  groups.  Hie  level  of  effort,  and  degree  of  success 
in  liaison  and  conmunlcatlon  between  groups  is,  to  a  great  extent,  based  on 
personal  rapport  rather  than  project  policy,  and,  due  to  the  lack  of  methods 
for  adequately  specifying  and  demonstrating  maintainability,  it  is  looked 
upon  as  only  a  fringe  benefit.  Obviously  for  the  man  in  space,  maintainability 
is  the  prime  requisite.  Upon  this  maintainability  and  the  determination  and 
demonstration  of  it,  can  be  based  our  only  assurances  of  longHnlssion  success 
in  the  near  future. 
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CONaUSION 


Maintainability  oust  be  applied  to  all  systems.  Including  the  human 
one.  For  the  equipment,  our  term  is  Product  Assurance;  assuring  that  equip- 
ment  can  be  repaired,  and  maintained  in  operation.  For  the  human  subqrstem, 
maintainalsility  becomes  meaningful  in  the  terms  of  sustenance  and  protection  - 
accessory  comforts  and  basic  life  support.  The  degree  to  vdiich  man  can  be 
utilised  in  space  will  depend  primarily  on  how  his  performance  enhances 
probability  of  mission  success.  Ibn's  cog^lete  effort  and  concentration  vdll 
be  required  to  assure  success  in  these  early  stages  of  the  space  program. 

Although  man  may  function  under  adverse  conditions,  his  perfoimance  may 
be  impaired,  or  it  may  even  decline  to  a  state  of  worthlessness.  The  snaint- 
enance  of  optimum  performance  in  an  undesirable  environment  may  eidiaust  the 
energy  of  an  individual,  resulting  in  subsequent  performance  deficiency  due 
to  the  cumulative  effects  of  stress.  Thus,  with  man  in  the  system,  and 
considered  as  a  subsystem,  it  is  to  be  considered  that  mission  success  is 
the  sum  of  reliability  and  maintainability.  A  decirease  in  man's  effectiveness 
could  result  from  an  overall  deterioration  of  qrstem  efficiency,  thus,  main¬ 
tainability  Includes  the  requirement  for  maintenance  of  the  human  subsystem. 

To  fully  utilise  man's  capabilities  requires  a  ^stem  designed  for  main¬ 
tainability,  and  the  present  state-of-the-art  in  irellablllty  requires  that 
man  exercise  his  capability  of  maintenance  to  the  fullest.  The  degrading 
affects  of  time  and  environment  can  be  countered  only  by  optimum  design  for 
reliability  and  maintainability. 
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Figare  3.  Life  Characteristic  Curves 
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SUMMARY 

It  is  the  position  of  the  Air  Force  Logistic  Command  and  the  using 
oomaands  that  the  present  day  world  situation  and  the  urgent  need  to 
obtain  maximum  defense  for  each  dollar  and  for  each  manhour  spent, 
dictates  that  the  militaiy  services  and  Industry  woric  together  as  a 
team  for  the  common  good  of  our  national  defense  and  the  econony  of  our 
country.  It  hsis  been  established  that  the  operational  oapabillty  and 
effeotlveness  of  our  equipment  Is  being  reduced  by  unnecessary  downtime 
for  maintenance.  Also,  that  funds,  manpower  and  logistic  resources  are 
being  expended  to  perform  maintenance  that  could  have  bean  avoided  by 
designing  and  building  good  maintainability  ohau^acteristioa  into  all 
equipment  during  the  initial  design  phase.  Hrmdreds  of  millions  of 
dollars  are  being  er^endad  annually  for  retrofit  modifications  to 
redesign  equipment  so  that  it  can  be  affeotiwely  maintained  and 
supported  with  rasouroea  that  are  avedlable  to  the  operating  units. 

MAXmUM  lEPENSfi  fob  u^llar 

The  present  day  world  sit\uition  and  the  urgent  need  to  obtain 
maximum  defense  for  each  dollar  and  for  each  manhour  spent,  dictates 
that  the  military  services  and  Industry  work  together  as  a  team  for 
the  common  good  of  the  defense  and  economy  of  our  country.  To  achieve 
these  objectives,  we  must  laq;)r:^3ve  our  communication  and  coordination. 

Ve  must  develop  a  better  understanding  of  current  and  potential  problems 
that  cause  unnecessary  downtime  of  our  equipment  or  result  in  the 
unneoessaxy  expenditure  of  vital  manpower,  funds  and  materiel  resour^Jes. 

In  this  regard,  the  program  for  Improved  systems  and  equipment  maint- 
ainablllty  covers  an  area  wherre  our  Joint  efforts  oan  pay  unlimited 
dividends.  Unfortunately,  many  people  in  Industry  and  the  Air  Force 
are  net  aware  that  the  oapabillty  and  effectiveness  of  our  forces  is 
being  reduced  by  unnecessary  downtime  for  maintenance,  and  that  we  are 
expending  funds  and  manpower  resources  to  do  work  that  could  have  been 
avoided  by  eatrly  recognition  of  lnq;>ortant  logistic  requirements  during 
Inltlad  design  cf  all  systems  and  equipment.  If  the  procurement  agency, 
contractor  and  design  engineer  do  not  know  or  fully  understand  the 
customer's  requirements,  capabilities  and  llsdtatlons,  the  probabilities 
are  high  that  the  end  product  will  not  contain  all  required  characteristics. 
Failure  on  the  part  of  the  service  and  Industry  to  identify  and  define 
all  vital  systems  and  equipment  design  requirements  and  oharaoteriatios  Is 
resulting  in  the  delivery  of  systems  and  equipment  that  are  not  maintain¬ 
able  at  the  three  levels  of  maintenance;  i.e.,  organizational,  field  and 
depot,  with  available  personnel,  funds  and  materiel  resources.  As  a 
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resxilt,  misBlon  capability  la  being  degraded  through  unneceaaaxj  equip- 
nent  dountlne  for  maintenance.  This  forces  the  Air  Force  tc  eoqpend 
orltioal  funds »  manpower  and  materiel  resouroea  that  oould  have  been 
avoided  through  effective  planning  and  ccordinatlon  during  the  oonoeptual 
and  eaurly  design  phases. 

sjyzsmog 

Duriiog  the  past  36  months  I  have  talked  with  many  people ^  both  In 
Induatzy  and  in  the  Air  Force |  concerning  the  iBq)ortanoe  of  designing 
and  building  good  maintainability  characteristlos  into  adl  aysteos 
and  equipment.  The  reaction  of  various  people  to  this  vital  program 
ia  very  interesting.  I  find  that  moat  people  can  be  placed  in  one 
of  two  groups.  The  group  an  individual  falls  in  usuailly  depends  on 
his  background,  e^qperience  and  interest  displayed  in  achieving 
maximum  operational  effectiveness  at  minimum  cost. 

a.  m. 

Among  the  first  group  are  those  who  have  spent  oonaider- 
able  time  in  the  field  where  they  were  immediately  responsible  for 
or  directly  concerned  with  the  maintenance  of  first  line  equipment. 

Also  among  this  group  are  management  people  who  have  refused  to 
accept  the  oontension  of  some  that  greatly  increased  systems  and 
equipment  downtime  for  maintenance,  and  high  logistic  support  costs 
are  inherent  with  present  day  systems  and  equipment.  This  first 
group  of  people  is  very  cognizant  of  the  urgent  need  for  an 
effective  maintainability  program,  and  are  doing  everything  possible 
to  support  it.  They  are  highly  encouraged  to  know  that  top  level 
management  in  Industry  and  the  Air  Force  are  beginning  to  give 
attention  to  this  importa^it  area. 

b.  COT 

The  second  group  consist  primarily  of  those  people  who 
have  little  or  no  knowledge  of  logistics  or  logistic  requirements. 

They  have  not  been  exposed  to  field  operations  and  do  not  know  the 
customer,  his  requirements,  limitations  or  capabilities.  They  do 
not  realize  that  the  Air  Force  mission  is  being  degraded  by 
unnecessary  systems  and  equipment  downtime  for  maintenance. 

Furthermore,  they  are  unaware  that  the  maintenance  manhours  per 
flying  hour  or  operating  hoxir  in  the  case  of  equipment  and  non-air 
borne  systems,  has  increased  2  to  7  times  over  what  it  was  for 
comparable  equipment  duidng  World  War  II.  (HBISR  TO  MAISTB5NANCB 
KA11H)UR  THEN])  CHAFT) 

c.  EXAMPLE 

The  famous  World  War  II  P-^1  required  approximately 
13  maintenance  manhour  per  flying  hour.  Today,  the  P-106  requires 
approximately  ^0  maintenance  manhours  per  flying  hotir,  or  an 
inore2U3e  of  30^  over  the  World  War  II  P-51.  In  the  bomber  class, 
it  is  interesting  to  note  that  the  B-17  required  approximately 
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20  maintenance  manhoTirs  per  flying  hour.  Currently,  the  B-52  requires 
approximately  140  maintenance  manhours  per  flying  hour,  or  w  increase 
of  600^  over  the  B-17.  In  the  non-airbome  equipment  area,  we  note  that 
the  World  War  II  SCB-270  ground  radar  set  required  approximately  11 
maintenance  manhours  per  100  operating  hours.  Current  AFK  66-1  maintenance 
data  indicates  that  the  AN/AFS-6  radar  requires  approximately  36  maintenance 
manhours  per  100  operating  hours,  or  206^  increase  over  the  World  War  II 
SCIh270, 

CACaS  PACTOBS 

You  may  be  Inteiested  to  know  that  a  high  percentage  of  this  inoreeused 
downtime  for  all  of  this  equipment  is  due  to  unscheduled  maintenance  of 
electronic  equipment.  Adequate  test  points,  modular  design  and  proper 
aooessabillty  would  greatly  reduce  the  downtime  and  Increase  the  operational 
availability  of  the  equipment.  From  these  exas^les,  it  is  apparent  that 
comething  must  be  done  to  reduce  thi.?  rapidly  Inoreoelng  trend  in  maint¬ 
enance  per  operating  hour  or  flying  hour  and  systems  equipment  downtime  for 
maintenance.  We  sue  rapidly  exceeding  our  maintenance  capability  and  the 
availability  of  personnel,  skills,  funds  and  logistic  rescourcas  to 
accon^lish  the  maintenance  workload. 

BiQUIPMEST  AlTD  COMPLEXITY 

It  is  reasonable  to  assume  that  a  portion  of  this  Increased  workload 
is  due  to  increased  complexity  of  orir  systems  and  equipment.  However,  in 
most  oases,  the  ratio  between  the  increase  in  systems  and  equipment 
complexity  and  the  increase  in  maintenance  manhours  per  flying  hour  or 
operating  hour  is  contpletely  out  of  proportion. 

COST  OP  maintenance  vs  cost  of  EOmPMSMT 

Another  Indication  of  the  increasing  requirement  for  improved  maintain¬ 
ability  characteristics  can  be  found  in  information  oon^iled  by  NSIA  and 
the  DOD.  The  HSIA  has  established  that  even  though  the  American  people  and 
the  military  services  have  been  showing  increased  concern  in  research  and 
development  eispects  of  our  national  defense  program,  the  dollars  spent  for 
maintenance  each  year  have  far  exceeded  the  dollars  spent  for  research  and 
development  of  new  systems  and  equipment  and  pure  science.  The  Depaxtment 
of  Defense  figures  indicate  that  we  are  currently  spending  approximately 
2^  million  dollars  per  day  for  all  VP^s  of  maintenance.  During  recent 
years  this  cost  has  been  Increasing  each  year  at  the  rate  of  approximately 
one  million  dollars  per  day.  Ihitil  recently,  this  represented  approx¬ 
imately  23^  of  the  total  defense  budget.  Also,  it  was  interesting  to 
note  that  the  cost  of  maintenance  exceeded  by  far  the  cost  for  procure¬ 
ment  of  new  systems  and  equipment,  including  their  associated  development 
costs. 


a.  EXAMPLE 

Using  the  above  information,  we  may  make  a  coiiq>arlson  of 
what  wovild  happen  if  you  sub  an  equipment  buyer  and  operator  experienced 
a  slmilsur  situation  where  the  cost  for  msuintenanoe  of  your  automobile, 
tolovision  set,  refrigerator  or  weishing  machine  exceeded  the  amortized 
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cost  of  your  equipment  by  500  to  1 ,00096,  If  the  annual  maintenance 
costs  for  your  automobile,  television  set,  refrigerator  or  weushing 
machine  exceeded  30^  of  the  annual  amortized  equipment  costs,  you 
would  be  most  unhappy.  You  would  probably  register  a  strong  coi^laint 
with  the  manufactiuer  or  his  looal  sales  representative.  If  he  would 
not,  or  could  not  do  anything  about  the  excessive  equipment  downtime  and 
maintenance  cost,  you  would  probably  refuse  to  buy  the  same  product  again. 
By  refusing  to  buy  his  product,  you  would  force  the  manufacturer  of 
con^etitive  products  to  consider,  during  initied  design,  the  customers 
requirement  for  reliability  and  maintainability,  as  well  as  performance. 

Yet  within  the  service,  we  continue  to  buy  equipment  that  cannot  be 
effectively  maintained  or  supported  until  we  spend  millions  of  dollars 
for  modifications  to  redesign  it.  I  think  it  is  about  time  we  start 
giving  recognition  to  the  contractors  and  design  engineers  that  design 
and  build  good  reliability  and  maintainability  oharaoteristics  into 
their  equipment,  as  well  as  performance. 

TWR  Txa«|i  off  thB  STOOL 

Designing  equipment  with  outstanding  performance  characteristics 
and  ignoring  the  requirement  for  reliability  and  maintainability,  is  like 
building  a  stool  with  one  leg.  You  must  design  and  build  at  least  three 
legs  on  the  stool  for  it  to  serve  its  purpose.  The  only  way  you  can 
eliminate  the  requirement  for  a  third  leg  is  to  design  and  build  the 
reliability  leg  so  broad  that  it  spans  the  arc  between  the  reliability  leg 
and  the  maintainability  leg.  This  takes  time,  is  limited  by  the  state  of 
art  and  usiially  is  not  economically  advisable, 

a,  INITIAL  DESICaT  COST  va  BEDSSIGN  COST 

Let  us  assume  we  fail  or  refuse  to  recognize  the  requirement 
for  the  reliability  and  maintainability  legs  on  the  stool,  and  after  we 
deliver  it  to  the  customer,  he  soon  recognizes  that  he  cannot  use  the 
stool.  He  has  two  choices.  Number  1,  junk  it.  Number  2,  redesign  it 
to  provide  for  the  two  legs  that  should  have  been  included  during  initial 
design.  However,  when  he  gets  the  bill  for  redesigning  the  stool  to 
provide  for  the  maintainability  and  reliability  legs,  he  finds  that  the 
cost  for  redesigning  or  modifying  the  stool  was  1 ,000  times  what  it  wo\ald 
have  been  to  include  the  two  additional  legs  duri^  initial  design,  A 
study  of  the  cost  for  modifications  to  achieve  equipment  reliability  and 
maintainability  indicate  that  the  ratio  of  cost  for  initial  design  vs 
redesign  is  ^proximately  1  to  1,000,  Therefore,  it  becomes  very  in^jortant 
that  we  identify  all  design  requirements  early  whereby  they  can  be  included 
in  the  Initial  design, 

b,  COST  FOR  BBTBOFIT  MODIFICATIONS 

Annually  the  Air  Force  spends  hundreds  of  millions  of  dollars 
for  modifications  that  are  necessary  to  reduce  systems  and  equipment 
downtime  for  maintenance  and  to  redesign  the  equipment  so  that  it  will 
be  maintainable  at  the  three  levels  of  maintenance.  (DISCUSS  COST  AND 
PBDBLBMS  HESUWING  PHOM  THE  TCTO  BACKIiOG) 
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*  0,  ATOimmB  OP  THE  CPSTOMBR 

It  is  very  difficult  to  convince  our  maintenance  personnel  in 
the  field  that  Industzy,  AFSC  and  AFLC  have  done  everything  possible  to 
design  their  equipment  so  that  it  can  be  effectively  supported,  maintained 
and  operated.  This  is  especially  true  in  those  cases  where  the  technician 
knows  that  they  are  being  required  to  spend  hundreds  of  manhotirs  to  gain 
access  to  high  failure  items  that  could  be  inspected,  removed  or  replaced 
in  a  matter  of  minutes  if  they  had  been  properly  located  or  adequate  test 
points  provided.  On  various  occasions  I  have  heard  technical  personnel  in 
the  field  express  the  view  that  designers  must  deliverately  design  Air 
Force  equipment  so  that  it  will  be  difficult  to  maintain.  These  people 
cannot  understand  how  a  brilliant  design  engineer  can  design  a  complex 
system  or  item  of  equipment  that  will  perforin  miracles  and  yet  not  give  due 
consideration  to  the  requirement  to  perform  maintenance  in  the  field. 

These  people  carmot  understand  why  the  design  engineer  does  not  rcscgni-ae'- 
that  when  the  reliability  of  equipment  has  been  degraded  through  use,  the 
inherent  reliability  can  be  restored  only  through  proper  maintenance. 

-t. 

d.  wewn  FfiB  BTSTTER  COMMUNICATION  AND  COMTBACTUAL  COURAGE 

I  must  admit  that  for  many  years  I  shared  this  view  with  our 
technicians  and  other  personnel.  However,  as  a  result  of  considerable  study 
and  discussion  with  design  engineers,  I  am  of  the  opinion  that  the  basic 
cause  for  disregarding  maintainability  requirements  during  Initial  design 
of  oi\r  systems/equipment  resvilts  from  the  lack  of  contractusd  requirements 
and  Ineffective  communication  between  the  customer  and  the  design  engineer 
concerning  logistic  requirements.  In  most  instances,  the  design  engineer 
is  not  acquainted  with  operating  problems  experienced  in  the  field.  He  is 
not  sufficiently  familiar  with  the  capability  and  limitations  of  the 
mechanic.  In  many  instances  he  has  not  been  appraised  of  the  operational 
requirements  for  short  turn  around  time  and  minimum  downtime  for  mainten¬ 
ance.  His  efforts  are  therefore  primarily  concentrated  on  performance 
characteristics  of  the  equipment.  As  a  restilt,  he  designs  a  piece  of 
equipment  with  outstanding  performance  characteristics  that  cannot  be 
effectively  maintained  or  supported, 

e.  AIR  FORCE  HB3P0N3IBILITY 

The  Air  Force  has  an  in^iortant  responsibility  in  this  area. 

During  the  conceptuad  phase,  we  must  give  thought  to  logistic  requirements 
along  with  operational  and  performance  requirements,  He  must  develop 
realistic  maintenance  concepts  based  on  the  mission,  the  geographical  areas 
and  climatic  conditions  where  the  equipment  will  be  maintained.  If  the 
operational  mission  of  the  equipment  dictates  that  maintenance  be  performed 
in  a  rice  paddy  during  the  monsoon  season,  then  we  shoidd  apprise  the 
contractor  and  the  designer  of  this  fact.  He  must  advise  the  contractor  of 
all  requirements  both  logistic  and  operationsd  that  demand  consideration 
during  initial  design.  We  must  apprise  the  contractor  of  our  maintainability 
requirements  at  the  three  levels  of  maintenance,  the  Air  Force  Base  Self 
Sufficiency  Policy,  maximum  maintenance  downtime  limitations,  the  require¬ 
ment  for  maximum  standardization  and  interchangeability  of  parts,  the 
requirement  for  minimum  peculiar  AQS,  tools  and  special  skills,  etc.  It 
is  unreasonable  to  expect  the  design  eziglneer  to  read  our  minds.  Since 
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most  design  engineers  have  not  been  exposed  to  svistained  field  operations, 

¥e  oajhnot  ejpeot  him  to  know  the  speoifio  problems  and  requirements  of  the 
field*  He  does  not  appreciate  the  difference  in  environment  of  his  air 
conditioned  wozk  room  and  the  hot  dessert  or  ice  covered  rasp  or  cite  where 
the  equipment  will  be  serviced  and  maintained* 

f*  A  STEP  THAT  WOULD  HELP 

It  would  appear  that  Industry  could  make  great  progress  in  this 
area  by  supporting  the  design  engineer  with  highly  qiuilified  and  erperienced 
technicians  who  know  from  erperlenoe  the  requirements  for  equipment  maintain¬ 
ability  characteristics.  These  technicians  could  provide  an  invaluable  input 
to  the  design  engineer*  They  could  be  effectively  utilized  thro\ighout  the 
design  and  development  to  include  Category  II  and  III  Test  Programs*  Since 
oixr  greatest  concern  in  this  area  is  downtime  of  equipment  and  associated 
costs,  these  technicians  cotild  greatly  assist  the  engineer  in  arriving  at 
reliability  and  maintainability  trade  of  decisions*  The  contractors 
technical  representatives  and  field  service  personnel  should  be  an  ideal 
source  to  obtain  these  people,  provided  they  have  had  sufficient  field 
experience*  This  action  would  relieve  the  engineer  of  many  time  consuming 
details  and  permit  him  to  devote  more  tine  to  pure  engineering  work* 

THE  CU3T0MEB3*  PQSITIOy 

From  what  has  been  said  it  should  be  quite  evident  that  the  Air  Force 
Logistic  Command  and  the  using  commands  are  quite  concerned  over  the 
rapidly  increasing  trend  in  maintenance  workload  and  the  resultant  down¬ 
time  of  our  equipment*  Also,  we  sure  highly  concerned  about  the  increasing 
cost  involved  in  supporting  this  increased  maintenance  workload*  We  must 
take  positive  action  now  to  reverse  this  rapidly  increasing  trend*  If  we 
cannot  reverse  the  trend,  we  must  flatten  it  out*  Any  way  you  approach 
the  problem,  oommon  sense  dictates  that  Industry  and  the  military  services 
must  jointly  develop  and  inclement  a  maintainability  (M)  program  that  will 
result  in  the  delivery  of  systems  and  equipment  that  can  be  effectively 
maintained,  supported  and  operated  with  the  limited  funds,  personnel  and 
materiel  resources  that  are  available  to  the  Air  Force  Logistic  Command 
and  the  using  commands. 

CLOSING  HBMAHE3 

In  closing  I  would  like  to  briefly  discuss  some  examples  of  poor 
maintainability  in  electronic  systems*  These  examples  should  give  you  an 
idea  why  many  of  our  people  in  the  field  contend  that  our  systems 
acquisition  people  and  Industry  are  not  too  concerned  about  the  maintenance 
workload  that  is  Inposed  on  them,  or  the  associated  costs  and  downtime  of 
their  equipment* 


a*  EXAMPLES 


1*  (For  discussion  during  presentation.) 

2* 

3. 

4. 
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From  these  exanq^lee  and  from  vhat  I  have  said,  it  should  be  apparent 

that  the  Air  Force  Logistic  Command  in  our  dual  role  of  providing 

world  vide  logistic  support  for  all  Air  Force  materiel  and  as  a  using  command 

have  no  choice  but  to  demand  that  all  systems  and  equipment  be  designed 

initially  so  that  it  oan  be  effectively  maintained  at  the  three  levels  of 

maintenance. 
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SUMMARY 


From  the  more  than  forty  (40)  existing  definitions  of  maintainability, 
a  simplified  version  is  stated  along  with  a  brief  synopsis  of  the  history 
of  maintainability  programs  and  today's  requirement  for  the  maintainability 
engineer. 

The  NUDETS  System  maintainability  program  is  defined  beginning  with 
the  origination  of  customer  specifications  followed  by  the  step-by-step 
series  of  events  that  transpires  until  the  time  of  customer  equipment  ac¬ 
ceptance.  The  maintainability  engineer's  role  is  shown  in  a  typical  program 
such  as  the  one  applied  to  the  NUDETS  system  and  covers  the  phases  of  pre¬ 
design,  development,  manufacturing,  testing,  and  installation/customer 
acceptance. 

The  equipment  pre-design  and  development  phase  takes  into  consideration 
factors  such  as  the  equipment  configuration,  the  environment,  type  of  main- 
tenmce  to  be  performed,  the  facilities  and  test  equipment  available  and  the 
capabilities  of  personnel  required  to  perform  this  maintenance.  As  back-up 
material  for  these  phases,  the  guide  lines  for  design  as  stated  in  MIL-M- 
26512  and  AFSC  Manual  80-5  are  listed  for  use  as  references. 

In  the  manufacturing,  test  and  installation/customer  acceptance  phases, 
a  maintainability  measurement  program  is  outlined.  This  program  measures 
the  impact  of  the  maintainability  effort  on  the  overall  system  and  shows  how 
to  translate  these  measurements  into  tangible  improvements  to  the  system.  A 
maintainability  checklist  is  described  in  order  to  acquaint  the  audience 
with  a  means  of  determining  the  existence  of  maintainability  features  in  the 
various  sub-divisions  of  the  equipment.  The  advantages,  disadvantages  and 
best  use  of  the  checklist  is  also  pointed  out.  In  addition,  such  things  as 
designed  features  that  affect  equipment  downtime  on  displays,  controls  and 
external  accessibility  are  covered. 

Since  maintainability  evaluation  and  reporting  is  a  new  and  challenging 
field,  it  is  shown  how  the  more  detailed  and  well  defined  the  information 
regarding  data  collection  and  methods  of  analysis,  the  greater  the  value  of 
maintainability  realized.  In  conclusion,  guides  to  successful  maintain- 
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ability  designs  are  listed  for  references  in  designing  future  programs. 
INTRODUCTION 

Maintainability  means  many  things  to  many  people.  To  a  wife  it  means 
maintaining  her  in  the  style  that  she  would  like  to  become  accustomed,  To 
the  small  child  it  means  Dad's  ability  to  repair  the  numerous  toys  that  are 
frequently  broken.  To  industry  it  can  mean  one  of  over  forty  (40)  different 
definitions  that  are  listed  in  various  publications.  One  EIA  guide  lists  a 
total  of  27.  Maintainability  to  the  Defense  Systems  Department  of  the 
General  Electric  Company  means  the  generation,  monitoring,  and  measurement 
of  the  combined  features  and  characteristics  of  equipment  design  that 
facilitates  the  ease,  rapidity,  economy  and  accuracy  with  which  maintenance 
operations  can  be  performed  by  personnel  of  average  skills  under  specified 
environmental  and  usage  conditions. 

Maintainability  is  not  new  to  industry;  it  has  been  known  by  many  names 
throughout  history,  Repairability  and  serviceability  were  popular  terms 
during  the  early  50's.  At  that  time,  many  companies  had  large  advertising 
campaigns  stressing  these  features.  Some  campaigns  were  in  conjunction  with 
reliability  features,  It  is  interesting  to  note  that  when  the  effort  to 
improve  reliability  was  first  initiated,  many  hoped  that  equipment  relia¬ 
bility  could  be  improved  to  the  degree  that  the  need  for  maintenance 
activity  would  be  practically  eliminated.  However,  the  growth  in  equipment 
complexity  soon  shattered  this  hope  and  although  the  search  for  further  re¬ 
liability  improvement  continues,  it  is  unwise  to  plan  future  systems  on  the 
assumption  that  some  miracle  will  suddenly  achieve  the  ethereal  goal  of 
absolute  reliability. 

Faced  with  these  problems,  military  and  commercial  customers  must  pay 
increased  attention  to  the  new  technology  of  designing  for  maintainability. 
This  technique  too  is  not  new  to  the  design  engineer  nor  to  industry.  Good 
engineers  have  always  designed  their  equipment  with  an  eye  to  maintaining 
it,  When  today's  maintainability  programs  were  new,  it  was  often  said  that 
if  the  design  engineer  did  his  job  well,  there  would  be  no  need  for  the 
maintainability  engineer.  This  is  probably  true  under  ideal  conditions; 
however,  the  complexity  of  the  systems  and  specifications  of  today  and  the 
usual  crash  programs  encountered,  do  not  allow  time,  nor  do  most  companies 
have  the  staff  of  design  engineers  that  can  give  the  maintainability  portion 
of  design  the  detailed  attention  that  is  required  to  assure  a  truly  main¬ 
tainable  product.  Therefore,  today  there  is  an  increased  demand  for  a 
specialist  to  work  with  the  designer  beginning  with  the  initial  stages  of 
equipment  concept  design  and  ending  with  the  users  acceptance  of  the  end 
product, 

In  between  the  alpha  and  omega  of  design  phases,  we  think  in  terms  of 
pre-design,  development,  manufacturing,  testing,  and  installation/customer 
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acceptance  efforts ^  At  each  stage  the  maintainability  engineer  has  a  never- 
ending  job  to  do.  The  importance  of  acquiring  maintainability  aid  at  the 
earliest  possible  time  in  a  development  program  cannot  be  stressed  too 
often.  Designing  after-the-fact  can  only  increase  design  and  production 
costs.  Besides  the  costs  in  terms  of  dollars  and  cents,  it  is  not  unlikely 
that  the  cost  could  include  lives  lost  or  missions  failed. 

PRE- DESIGN  PHASE 

In  a  typical  program  such  as  the  one  the  General  Electric  Company 
applied  to  the  NUDETS  system,  the  conception  of  the  maintainability  program 
began  with  the  system  proposal  work.  Keeping  in  mind  the  prime  objective 
of  our  Maintainability  program  which  is  to  increase  the  useability  and  hence 
the  availability  of  the  equipment,  sleeves  were  rolled  up  and  the  work  be 
gan.  At  this  stage,  which  will  henceforth  be  referred  to  as  Pre-design 
Phaser  ground  work  was  laid  in  conjunction  with  various  other  engineering 
functions  that  ended  in  a  maintainability  concept.  To  accom|'>lish  this  end 
the  system  was  defined  in  order  to  determine  the  design  necessary  to  ade¬ 
quately  manufacture,  test,  repair,  install,  and  maintain  the  required  equip¬ 
ment,  Logistics  requirements  and  limitations  pertaining  to  maintenance  were 
also  considered  along  with  environment  criteria,  test  equipment,  and  tool 
availability. 

In  addition,  some  time  was  spent  during  Pre-design  in  detailed  contract 
negotiations  of  maintainability  tasks.  The  degree  of  application  of  main¬ 
tainability  principles  to  the  system  design  parameters  were  determined  and 
accomplished  after  coordination  meetings  between  the  contractor  and  the  cus¬ 
tomer,  Particular  attention  was  paid  to  degree  of  compliance  with  MIL-M- 
265i2A.  The  Maintainability  Program  then  developed  was  based  on  MIL-M- 
26512A.  Plans  were  also  made  to  demonstrate  maintainability  features  and 
accomplishments.  The  maintainability  engineers  output  derived  from  the 
negotiations  during  the  Pre-design  Phase  consisted  of  the  following  inputs 
to  the  program  plan.  MTTR,  MTBF  goals,  work  statements,  milestones,  man¬ 
power  estimates,  preliminary  maintainability  checklists,  and  availability 
equipment  specifications. 

To  sum  up  the  Maintainability  engineer's  effort  during  the  Pre-design 
Phase,  it  was  a  time  of  defining  the  system  and  customer  requirements, 
negotiating  maintainability  tasks  and  submitting  inputs  to  the  program  plan. 
The  plan  included  information  defining  the  company's  anticipated  maintain¬ 
ability  goals  and  a  method  for  achieving  and  demonstrating  that  the  main¬ 
tainability  goals  have  been  met. 

DEVELOPMENT  PHASE 

During  the  Development  Phase  close  liaison  was  maintained  between  main¬ 
tainability  engineering  and  other  functions  such  as  design,  reliability  and 
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value  engineering,  human  factors,  quality  control,  drafting,  snare  parts 
production,  field  and  sub. contractor  supnort.  Maintainability  engineers 
were  made  available  for  consultation  and  assistance  to  the  equipment  design 
engineers.  This  assistance,  thus  acted  as  an  aid  to  the  design  engineer  in 
order  to  assure  compliance  with  maintainability  requirements  without  com¬ 
promising  the  technical  performance  of  the  equipment. 

In  the  case  of  sub -contractor  activity  on  the  NUDETS  system,  a  pre¬ 
liminary  maintainability  checklist  was  submitted  with  the  equipment  specs 
Under  General  Electric's  direction  a  maintainability  program  was  implemented 
by  each  associate  contractor.  The  role  of  the  General  Electric  Company  then 
became  one  of  coordination  in  order  to  achieve  an  integrated  overall  main, 
tainability  program 

The  work  at  this  time  took  into  consideration  factors  such  as  equin- 
merit  configuration.,  environment  type  of  maintenance  to  be  nerformed 
facilities.,  and  test  equipment  available  and  the  capabilities  of  personnel 
required  to  perform  this  maintenance.  As  back-up  material  for  these 
efforts  some  of  the  more  important  guide  lines  for  design,  as  stated  in 
MIL- M-26SI2A  and  AFSC  80.S  and  6  were  used  as  references  in  designing  eiec 
tronir  eouipment  Examples  of  these  guide  lines  are; 

•  =.  un  to  minimize  the  complexity  of  maintenance  tasks 

UC;  ign  ^  ..Pill  and  oosiTive  recognition  of  equipment  mal- 
i  II  ur  marginal  pertormancc. 

(3)  Design  to  require  minimum  maintenance  skills  and  training, 

(4)  Design  for  optimum  accessibility  in  all  systems  requiring 
maintenance,  inspection  removal  or  replacement. 

Design  for  maximum  safety  of  personnel  performing  tasks 

(6)  Design  for  a  minimum  number  and  type  of  spare  parts  and 
assemblies . 

Similar  guide  lines  were  used  to  derive  up-dated  maintainability  check 
lists  Provisions  were  then  made  to  assure  that  the  latest  maintainability 
design  checklists  were  provided  for  the  use  of  each  design  engineer.  These 
checklists  combined  with  the  maintainability  engineers  exnerience  and  con¬ 
sultation  efforts,  were  an  excellent  means  of  assuring  compliance  with  the 
maintainability  program  plan  However,  you  must  remember  that  the  design 
eng^ineer  still  has  complete  charge  of  the  approval  of  the  end  product 
thetefore  many  trade  offs  were  realized  before  the  end  product  was  a  re¬ 
ality.  As  a  result  of  this  factor  considerable  time  was  spent  with  Design 
Engineering  at  the  early  stages  of  this  phase  in  order  to  negotiate  these 
design  trade-offs  on  both  in-house  and  purchased  equipment.  Where  trade, 
offs  arc  involved,  there  are  many  problems  that  arise  in  this  area.  For 
instance  in  considering  sub-cont ractors .  many  factors  such  as  the  economics, 
the  timing,  the  techniques  used  etc.,  have  to  be  analyzed  before  accenting 
a  sub-contractor  or  an  otf-the- shelf  item.  In  cases  like  this  maintaina 
h:iit-  IS  bound  to  suffer  somewhat  due  to  the  necessity  of  weighing  the  best 
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interests  of  the  job  against  some  compromise  reached  in  the  selection  of  a 
particular  company  or  product. 

Another  trade>off  situation  that  comes  to  mind  is  the  problem  con¬ 
nected  with  the  availability  figures  associated  with  commercial  equipment 
that  must  be  combined  with  the  in-house  equipment  being  designed.  One 
could  make  the  assumption  that  if  a  system  is  designed  from  the  beginning 
by  one  company  that  has  a  Maintain^ility/Reliability,  hence  Availability 
Program,  then  you  realize  a  relatively  high  figure  of  performance.  But  if 
you  have  to  purchase  equipment  from  an  outside  company  that  has  no  M/R  pro¬ 
gram,  you  usually  realize  a  lower  figure  of  performance.  This  can  be 
especially  true  when  purchasing  some  commercial  off-the-shelf  equipment  that 
must  be  combined  with  military  equipment.  The  main  problem  in  this  case  is 
getting  a  company  to  redesign  a  feature  that  is  recognized  as  non-maintain- 
able  or  one  that  has  a  definitely  low  MTTR  figure.  As  stated  before,  once 
an  item  is  designed,  a  great  deal  of  time,  effort,  and  cost  is  involved  in 
order  to  redesign.  Therefore,  the  Maintainability  engineer  must  use  all  of 
his  design  experience  and  tact  in  order  to  resolve  these  areas  to  the  best 
compromise  possible.  If  per  chance  it  cannot  be  done,  then  this  informa¬ 
tion  must  be  presented  to  the  contracting  office  so  that  everyone  is  aware 
of  the  reason  behind  the  lower  Availability  figure  applied  to  the  overall 
system. 

At  this  time  it  should  be  noted  that  equipment  design  characteristics 
are  always  evaluated  for  conformance  to  maintainability  principles  to  as¬ 
sure  that  they  are  within  other  system  design  parameters  prior  to  making 
any  design  trade-offs  affecting  operational  or  logistics  requirements. 

Once  again  it  is  most  important  to  design  maintainability  features  into 
the  equipment  at  the  initial  development  stages;  that  is  why  the  Develop¬ 
ment  Phase  is  by  far  the  most  important  phase  of  any  Maintainability  pro¬ 
gram.  The  availability  of  the  system  will  be  assured  if  the  correct 
features  are  designed  into  the  system  at  this  time. 

The  development  Phase  then  was  a  time  of  close  design  cooperation 
between  maintainability  and  other  engineering  functions  both  in-house  and 
with  sub- contractors.  This  action  was  necessary  to  assure  the  intro¬ 
duction  of  maintainability  features  into  the  equipment  at  the  initial 
stage  of  design.  MIL-M-26512A  and  AFSC  80-5  and  6  were  used  to  make  cer¬ 
tain  that  best  engineering  practices  were  incorporated.  Preliminary 
checklists  were  generated,  utilized,  and  signed  off  to  confirm  compliance 
with  program  plans.  Informal  design  reviews  are  held  with  cognizant  per¬ 
sonnel.  Where  necessary,  recommendations  and  corrective  actions  were 
processed  as  a  result  of  these  endeavors. 

MANUFACTURING  PHASE 

Assessment  of  the  achievements  of  the  maintainability  program  is  a 
necessary  and  integral  part  of  the  overall  program.  In  the  manufacturing 
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phase  the  actual  measurement  program  began.  The  goal  was,  of  course,  to 
measure  the  impact  of  the  maintainability  effort  on  the  overall  system  and 
translate  these  measurements  into  tangible  improvements  to  the  system.  At 
this  stage  formal  design  review  procedures  were  utilized  to  realize  this 
end.  Formal  design  reviews  in  this  case  means  combined  customer/ contractor 
equipment  or  system  design  reviews.  During  the  Development  Phase  many  com> 
pany  internal  design  reviews  were  held  as  well  as  informal  meetings  with 
the  customer  and  sub- contractors,  but  it  is  not  until  this  Phase  of  Design 
that  all  of  the  customers,  consultants,  contractors,  and  sub- contractors 
assemble  to  thrash  out  their  differences  on  the  more  or  less  completed  as¬ 
semblies. 


The  formal  design  reviews  in  this  case  were  held,  once  drafting  had 
completed  preliminary  drawings  and  prior  to  design  finalization  and  re¬ 
leased  to  manufacturing.  These  design  reviews  were  held  in  conjunction 
with  each  individual  piece  of  equipment,  such  as  the  sensors,  computer, 
console,  etc.  In  preparation  for  the  review,  the  maintainability  engi¬ 
neer  prepared  an  up-dated  checklist  which  applied  specifically  to  the 
latest  design  of  the  equipment  in  question.  This  checklist  accomplished  a 
quantitative  appraisal  of  compliance  with  maintainability  requirements. 

The  design  review  checklist  was  tailored  to  consider  all  echelons  of  main¬ 
tenance.  The  prime  consideration  was  to  minimize  system  downtime.  Addi¬ 
tional  emphasis  was  placed  on  control  of  fault  recognition,  fault  isolation, 
repairable  features,  and  repair  verification. 

The  following  infoimation  shows  an  example  of  checklist  categories  for 
one  type  of  equipment:  All  items  were  lateu  from  1  to  4. 


ment , 


( Ij  Packaging 

Equipment  is  of  modular  construction  for  easy  unit  replace- 


(2)  Labeling 

t>arts  and  controls  clearly  and  accurately  labeled, 

(3)  Latches  and  Fasteners 

Lat^esT'anS/or  fasteners  are  captive,  need  no  special  tools 
and  require  only  a  fraction  of  a  turn  to  release, 

(4)  Access ibilij^ 

A"ccess  aHequate  for  visual  and  manipulative  tasks. 

(5)  Cables  and  Connectors 

AlT”*^Tes  routed  so  they  cannot  be  pinched  by  doors,  lids, 

etc. 

(6)  Operation  and  Fault  Detection 

Task  accomplishment  requires  minimum  test  equipment. 

(7)  Adjustments 

Required  adjustments  kept  to  a  minimum. 
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( 8)  Test  Points 

Exposed  tes^t  point  provided  for  outputs  and/or  inputs  of  each 

major  unit. 

(9)  Tools,  Jigs,  and  Adaptors 

Special  tool  requirements  kept  to  a  minimum. 

The  advantage  of  a  checklist  is  that  it  allowed  experienced  design 
oriented  engineers  to  go  through  the  electrical  and  mechanical  features  of 
the  design  and  evaluate  each  and  every  item,  Here  working  in  conjunction 
with  the  reliability  engineers  preliminary  functional  analysis  we  were  able 
to  determine,  in  the  case  of  electrical  circuits  for  example,  the  com¬ 
ponents  or  printed  circuit  card  assemblies  with  the  lowest  NCTBP.  With  this 
information  an  analysis  of  the  mechanical  construction  plus  the  diagnostic 
time  determined  up-dated  MTTR  figures.  Recommendations  for  in^rovement 
were  then  initiated  where  necessary. 

In  addition  to  the  checklist  and  guide  lines  for  best  engineering  de¬ 
sign  practices,  'he  maintainability  engineer  was  also  concerned  with  design 
features  that  i.re  unique  to  specific  portions  of  the  equipment.  While 
there  are  close  correlations  between  these  areas,  there  are  nevertheless 
published  lists  that  allow  the  engineer  to  specifically  analyze  particular 
features  of  each  piece  of  equipment.  These  data  are  always  up-dated  to 
reflect  advances  in  maintainability  technology  and  changes  in  design  con¬ 
figurations. 

The  following  design  data  illustrates  some  of  the  features  that  affect 
downtime  on  specific  portions  of  equipment: 

a.  Design  features  affecting  equipment  downtime  on  displays  and 

Controls. 

(1)  Locate  all  displays  used  in  system  checkout  so  they  can  be 
observed  from  one  position. 

(2)  Use  auditory  signals  to  supplement  tele- lights  for  displays 
not  constantly  watched  when  changes  in  indications  must  be  noted 
immediately. 


b .  Design  features affecting  equipment  downtime  on  external  access- 


uesign 

ibility 


(1)  Use  hinged  door  for  physical  access  in  lieu  of  cover  plate 
with  screws. 

(2)  If  units  must  be  pulled  out  frequently  from  installed 
positions,  mount  them  on  roll-out  racks,  slides,  or  hinges, 

(3)  Locate  test  points  in  an  accessible  location,  unimpeded  by 
other  parts  of  the  equipment, 
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In  conjunction  with  the  Design  Review  effort,  the  Maintainability  engi> 
neers  were  also  engaged  in  factory  follow-up  activities.  These  activities 
consisted  of  periodic  factory  inspections  and  consultations  with  Quality 
Control  and  Reliability  personnel.  Numerous  constructive  suggestions  were 
received  from  the  man  closest  to  the  problem  -  the  factory  foreman.  The 
factory  follow-up  activities  resulted  in  additional  improvements  to  the 
equipment  design  and/or  verification  of  the  existing  design  criteria. 

The  manufacturing  Phase  may  then  be  summed  up  as  follows:  The  assess¬ 
ment  of  the  achievements  of  the  maintainability  program  began  at  this  time 
in  the  form  of  formal  design  reviews  held  prior  to  the  finalization  of  de¬ 
sign  and  the  total  release  of  drawings  to  manufacturing.  Through  the  use 
of  maintainability  checklists,  portions  of  actual  hardware  were  appraised 
in  conjunction  with  mechanical  drawings  and  schematics.  Recommendations 
for  improvement  or  corrective  actions  were  then  initiated  where  necessary. 
During  the  actual  manufacturing  process  factory  follow-up  activities 
allowed  the  maintainability  engineer  to  verify  the  latest  design  criteria. 

TEST  S  INSTALLATION  PHASE 


The  first  phases  of  the  program  previously  discussed  were  basically 
concerned  with  evaluating  design  features  that  cause  downtime  and  affect 
maintainability  primarily  from  a  hardware  sense.  Design  features  are  the 
portion  that  the  design  and  maintainability  engineer  can  influence.  Since 
design  features  are  only  partly  responsible  for  the  length  of  time  a  piece 
of  equipment  is  in  an  unsatisfactory  operating  condition,  it  is  reasonable 
to  investigate  and  allow  for  additional  causes  of  downtime  consumption 
primarily  from  a  software  sense;  the  part  a  maintainability  engineer  can¬ 
not  necessarily  influence.  In  a  typical  program,  the  test  and  installa¬ 
tion  acceptance  phase  involves  these  additional  causes. 

In  this  light,  the  support  practices  are  a  very  important  factor  of 
downtime  consumption  on  systems  having  a  strict  availability  requirement. 
The  problem  of  which  technique  to  use  in  gathering  meaningful  data  from 
these  practices  can  get  to  be  an  involved  process.  For  example,  a  poorly 
designed  system  could  be  made  operational  and  data  thus  masked  by  a 
highly  technical  and  efficient  maintenance  group  that  engaged  in  non¬ 
reporting  redesign  activities  as  a  part  of  their  function.  Data  gathered 
from  this  group  would  be  meaningless.  By  the  same  token  to  try  to 
determine  with  accuracy  the  intrinsic  maintainability  of  equipment  by  ob¬ 
serving  only  the  events  of  maintenance  would  be  misleading  also.  To 
realize  realistic  figures,  it  would  probably  require  the  exclusion  of  such 
factors  as  maintenance  support  policies,  human  factors,  environment  and 
many  other  important  situations  that  determine  availability.  Many  of  these 
situations  which  certainly  should  be  considered  are  difficult  to  measure. 
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There  are  also  many  time  elements  that  enter  into  availability  pre> 
dictions.  For  instance,  system  downtime  can  be  subdivided  into  logistic, 
repair,  and  final  test  time,  while  system  repair  time  can  be  subdivided 
into  the  following  maintenance  events: 

(1)  Preparation  (4)  Part  Procurement 

(2)  Malfunction  Verification  (5)  Repair 

(3)  Fault  Location  (6)  Final  Testing 

The  time  required  to  perform  each  of  these  distinct  categories  varies 
from  zero  to  several  hours  depending  on  numerous  characteristics  of  the 
equipment  and  maintenance  events.  Fault  location  is  by  far  the  principal 
contributor  to  system  repair  time.  If  diagnostic  time  is  to  be  minimized, 
it  is  necessary  to  consider  human  factors  elements  and  then  design  the 
equipment  to  facilitate  quick,  accurate  and  positive  actions  by  the  tech¬ 
nician.  The  most  important  human  factor  element  in  this  case,  that  would 
increase  equipment  availability,  would  be  to  thoroughly  train  the  tech¬ 
nician  troub  e  shooter.  His  ability  holds  the  key  to  this  most  important 
time  element. 

Some  feel  that  time  and  motion  studies  for  MTTR  measurements  may  be 
another  solution  to  the  problem  of  accurate  data  collections.  While  time 
and  motion  studies  work  quite  well  in  factory  assembly  evaluations,  it  is 
sometimes  impractical  to  use  this  approach  on  maintenance  events.  To  be 
able  to  enumerate  all  possible  motions  which  would  take  place  in  any  main¬ 
tenance  task  would  be  a  formidable  task.  Moreover,  the  impracticability  of 
this  approach  is  compounded  by  the  tenuous  nature  of  the  relationship  be¬ 
tween  the  frequency  of  occurrence  of  the  motions  and  the  characteristics 
of  the  system.  Time,  money,  and  manpower  in  most  cases  limits  the  collect- 
tion  of  data  in  this  manner. 

On  the  other  hand,  proper  data  must  be  collected  via  some  efficient 
method.  With  proper  data,  the  frequency  of  occurrence  of  repairing  cer¬ 
tain  equipment  can  be  predicted  fairly  accurately.  The  illustrations 
previously  given  showed  some  of  the  problems  involved.  In  spite  of  these 
problems,  the  situation  is  not  hopeless.  Experience  has  shown  that  in 
order  to  collect  proper  data,  you  must  first  allow  the  proper  testing  time 
both  in  the  factory  and  in  the  field.  In  both  cases,  insist  on  accurately 
filled-out  failure  reports.  If  these  methods  are  followed,  realistic 
equipment  failure  rates  can  be  determined  for  use  in  further  evaluations. 
The  test  and  installation  acceptance  phase  should  accomplish  this  end. 

At  the  time  of  this  writing,  the  NUDETS  equipment  is  in  the  factory 
test  and  installation  phase.  Data  is  being  collected  from  some  equipment 
in  operation  at  the  site  and  from  some  factory  testing.  Mean-time-to-re- 
pair  predictions,  based  on  the  assumption  that  all  spares,  test  equipment 
and  experienced  personnel  are  on  location  during  a  malfunction,  have  been 
completed.  The  final  functional  analyses  which  would  point  out  weak  points 
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in  the  system  have  just  been  completed  also.  Therefore,  it  is  only  possible 
to  point  out  the  method  to  be  used  in  the  field  for  data  collection  and  the 
evaluation  required  to  determine  the  realization  of  maintainability  goals. 

During  the  test  and  installation  phase  the  equipment  is  checked  out, 
operated  and  tested.  As  a  result  of  operating  the  equipment  all  failures 
should  be  properly  recorded  and  fed  back  to  Reliability  and  Maintainability 
personnel.  Little  data  of  course  would  be  gathered  if  the  system  operates 
in  a  flawless  manner.  You  would  require  a  period  of  years  to  get  a  true 
picture  of  the  problem.  On  the  other  hand,  if  failure  simulations  are 
scheduled,  the  equivalent  of  accelerated  life  testing  in  a  non-destructive 
manner  would  be  accomplished. 

Failure  simulation  in  this  case  means  to  plan,  through  the  use  of  Re¬ 
liabilities  functional  analysis,  tests  for  each  one  of  the  system  functions. 
These  tests  would  consist  of  determining  components  to  be  evaluated,  using 
sampling  methods  called  for  in  MIL-M-26152B  and  then  rendering  certain 
relays,  diodes,  power  supplies,  etc.,  inoperative.  At  this  point,  record 
the  length  of  time  that  it  takes  qualified  personnel  to  locate,  repair, 
test,  and  return  the  system  to  normal  operation.  With  sufficient  data  of 
this  type  plots  and  accurate  predictions  can  be  made  on  the  MTBF  and  MTTR 
features  of  the  system.  If  the  equipment  is  measured  under  field  environ¬ 
mental  conditions,  the  test  will  be  more  realistic. 

The  key  to  this  phase  of  system  design  then  is  to  allow  for  sufficient 
time  to  test  the  equipment  in  environmental  conditions  in  order  to  collect 
an  accurate  picture  of  the  equipment  capabilities.  The  longer  the  test 
cycle,  or  the  more  complete  the  failure  simulations  and  the  more  complete 
and  accurate  the  data,  the  more  realistic  the  distribution  curve  and  hence 
the  more  realistic  the  predictions. 

To  complete  the  picture,  the  maintainability  program  must  take  into 
consideration  the  problems  of  spares,  logistics,  and  maintenance  organiza¬ 
tions.  The  proper  test  equipment  with  sufficient  repair  tools  and  spare 
parts  must  also  be  allowed  for.  In  addition,  qualified  personnel  must  be 
made  available  and  provided  with  up-to-date  technical  manuals.  When  all 
of  these  facets  are  in  place,  true  maintainability/ aval lability  can  be 
realized, 

GUIDES  TO  SUCCESSFUL  MAINTAINABILITY  DESIGN 

In  conclusion,  to  sum  up  the  highlights  of  the  Maintainability  Design 
of  the  NUDETS  System,  the  following  points,  which  are  recommended  for  any 
program,  are  contributing  to  a  successful  NUDETS  maintainability  program: 

(1)  Determine  maintenance  requirements  imposed  by  system  operating 
conditions. 
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(2)  Consider  logistics  requirements,  maintenance  organisations,  and 
support  personnel  limitations. 

(3)  Translate  system  requirements  into  definite  maintainability  speci¬ 
fications. 

(4)  Prepare  and  continually  up-date  checklist  to  assure  compliance 
with  all  maintainability  features  through  numerical  prediction  techniques. 

(5)  Design  maintainabil' ty  features  into  equipment  at  earliest  phase 
to  prevent  costly  redesign. 

(6)  Follow  best  design  practices  per  AFSC  80-5/6  and  MIL-M-26512B. 

(7)  Plan  for  early  data  collection  and  analysis. 

(8)  Work  closely  with  design  engineering  and  other  functions. 

(9)  Participate  in  design  reviews,  recommend  and  follow  up  corrective 
action. 

(10)  Perform  periodic  factory  inspections  in  order  to  verify  latest 
design  criteria. 

(11)  Demonstrate  achievement  of  established  goals  through  controlled 
maintainability  tests. 

(12)  Procure  complete  and  accurate  failure  data  under  field  environ¬ 
mental  conditions  for  realistic  analysis  and  field  follow-up  efforts. 

(13)  Provide  adequate  reporting  of  progress  made  in  maintainability 
development  to  cognizant  authorities. 
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William  J.  Arnold 
General  Electric  Company 
Syracuse,  New  York 


Mr.  Arnold  is  a  Project  Engineer  in  the  Reliability  Engineer¬ 
ing  Group,  Defense  Systems  Department,  General  Electric  Company, 
Syracuse,  New  York.  In  this  position  he  has  been  responsible  for 
all  standards  activity  with  respect  to  equipment  reliability, 
evaluation  reliability  testing  techniques  -  processes  with  respect 
to  reliability,  reliability  documentation  including  project  re- 
qvdrements.  He  has  also  been  responsible  for  reliability  vendor 
reviews  and  establishing  overall  project  reliability  programs,  and 
is  currently  Project  Engineer  for  reliability  on  the  4771  System 
(NUDETS),  a  nuclear  detection  system. 

Mr.  Arnold  joined  the  General  Electric  Company  in  1956  after 
graduating  from  the  University  of  Rhode  Island  with  a  BSEE,  and 
is  an  alumnus  of  General  Electric's  Advanced  Engineering  Program 
completing  the  Creative  Engineering  branch  of  this  program.  While 
a  member  of  the  program,  experience  was  gained  in  the  design  and 
evaluation  of  semiconductor  devices,  design  of  tempera tvire  measur¬ 
ing  devices  for  automatic  measurement,  development  of  laboratory 
techniques  for  electronic  tube  evaluation  without  any  tube  modifi¬ 
cation  and  contributions  to  the  development  of  techniques  for 
particle  measurements  as  well  as  experience  in  the  design  and 
evaluation  of  industrial  equipment. 

Subsequently  in  1958,  Mr.  Arnold  joined  the  Reliability 
Engineering  Group  of  the  General  Electric  Heavy  Military  Depart¬ 
ment,  located  in  Syracuse,  where  his  responsibilities  Included  the 
development  of  technical  and  administrative  procedures  for  standard 
parts  and  project  data  book,  the  establishment  of  project  standards 
for  reliable  design,  the  establishment  of  circuit  testing  tech¬ 
niques  to  predict  and  insure  reliable  design,  and  the  investi¬ 
gation  of  advanced  techniques  for  reliability  design  improvement. 

In  1961,  Mr.  Arnold  was  appointed  to  his  present  position  of 
Project  Engineer,  Reliability  Engineering. 

Mr.  Arnold  is  a  member  of  the  following  professional 
societies; 

Professional  Engineer  N.  Y.  S. 

Associate  Member  AIEE 

Member  IRE 

Member  IRE  Group  on  Reliability  and  Quality  Control 
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JAMES  R.  BARTON 
Major  USAF 

Served  three  and  one  half  years  during  World  War  II  as  Aircraft 
Maintenance  Officer  and  Technical  Inspector  -  Squadron  and  Group 
level  respectively. 

BSEE  -  1947  -  Auburn  University,  Auburn  Alabama 

Electrical  Ehigineer  -  three  and  one  half  years  -  1947-1950 

Recalled  to  service  (USAF)  1950.  Served  1950-1955  with  Tactical 
Air  Command,  sciuadron,  group,  and  wing  level.  Served  1955-1958 
with  Strategic  Air  Command  in  positions  of: 

Flight  Line  Maintenance  Office 

Quality  Control 

Standardization 

Maintenance  Control 

Chief  of  Maintenance 

Chief  of  Maintenance  Task  Force 

Commander  Periodic  Maintenance  Squadron 

Division  Aircraft  Maintenance  Office 

Air  Force  Institute  of  Technology  Graduate  Program  1958-1960 

MSEE  -  University  of  New  Hampshire  -  I960  -  Thesis  Subject: 
Design  of  Simplified  and  Economical  Characteristic  Curve  Tracer 
for  Transistors. 

Assigned  ESD  (CCDD)  I960 

Chief  Equipment  Engineering  Branch 
(Reliability,  Maintainability,  AGE) 

Chief  Reliability  Division 
(Reliability,  Maintainability) 

Deputy  Chief  Personnel  Subsystem/lleliability  Branch 
(Reliability,  Maintainability) 

Chief  Engineering  Requirements  Division 
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James  R.  Barton  (Cont'd) 


MEMBER 


IRE 

PGRQC  -  Professional  Group  on  Reliability 
and  Quality  Control 

Tau  Beta  Pi  -  National  Honorary  Society 
for  Engineers 

Eta  Kappa  Pi  -  National  Honorary  Society 
for  Electrical  Engineers 

AFSC  Reliability  Task  Force 

AFSC  Maintainability  Task  Force 
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ROBERT  L.  BIDWELL 


Manager,  Value  Analysis  Administration 
Martin  Company 

Division  of  Martin  Marietta  Corporation 
Orlando,  Florida 


Robert  L.  Bidwell,  Manager  of  Value  Analysis  Administration  at  Martin, 
is  a  U.  S.  Army  veteran  (Lt.  Colonel,  ret.)  whose  service  spans  a  quar¬ 
ter  of  a  ceritury  with  the  Air  Corps,  Quartermaster  Corps  and  Ordnance 
Corps.  More  than  half  of  this  service  has  been  directed  toward  indus¬ 
trial  efforts,  providing  him  with  a  rich  and  varied  background  for  the 
responsibilities  which  he  assumed  at  Martin  in  May  1961. 

Bidwell  launched  his  Army  career  in  1936  as  a  Private  and  rose  to  the 
rank  of  Lt.  Colonel.  Assignments  during  those  years  covered  the  broad 
spectrum  of  Administration  and  Procurement.  They  ranged  from  Commander 
of  maintenance  and  supply  depot  operation  in  New  Guinea  during  World 
War  II  to  Staff  Officer  of  manpower  and  operating  budgets  for  all  Ord¬ 
nance  Procurement  Offices  in  Washington  for  four  years. 

For  seven  years  with  the  San  Francisco  Ordnance  Procurement  District, 
Colonel  Bidwell  served  in  such  capacities  as  Executive  Officer,  Contract¬ 
ing  Officer,  War  Manpower  Representative,  Labor  and  Deferment  Officer, 
and  later,  —  for  three  years,  acted  as  advisor  to  the  Netherlands  Govern¬ 
ment  on  building,  maintenance  and  organization  of  a  Supply  and  Maintenance 
Depot  System. 

Prior  to  his  appointment  with  Martin,  Bidwell  organized  and  opera^ted  a 
Branch  Office  of  the  Birmingham  Ordnance  District  which  was  responsible 
for  some  $400  million  in  contracts.  As  Commander  of  this  post,  he  had 
overall  responsibility  for  the  quality  of  material  contracted  and  released 
to  the  Army,  Navy,  and  Air  Force  as  well  as  administration  of  all  assigned 
contracts . 

Joining  Martin  shortly  after  his  retirement  from  active  service,  Bidwell 
assumed  managership  of  the  company's  Value  Analysis  Program  which  has  con¬ 
tributed  more  than  $18,000,000  in  operating  cost  reductions  during  the 
past  year. 

Martin,  as  a  leading  exponent  of  Value  Analysis  in  action,  has  attracted 
nation-wide  interest  in  its  program.  Explanation  of  this  program  by 
Mr.  Bidwell  and  his  staff  has  been  presented  to  widely  diversified  audi¬ 
ences  including  the  Department  of  Defense,  the  Army,  Navy,  and  Air  Force, 
American  Management  Association,  and  a  host  of  manufacturing  and  civic 
organizations . 
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F.  V.  Bucher,  Chief,  Logistics  Engineering 
Autonetics,  North  American 


Mr.  Bucher  joined  Autonetics  in  1954  as  a  research  engineer  in  the 
Inertial  NavigaLion  System  Test  Unit.  His  responsibilities  during  the 
first  foiir  years  Included  development  of  special  test  instrumentation 
equipment  for  laboratory,  field  and  flight  testing  of  inertial  naviga¬ 
tion  systems.  His  work  included  development  of  laboratory  test 
procedures  and  factory  process  specifications,  as  well  as  associated 
operation  and  maintenance  instruction  manuals.  During  the  last  year 
in  the  System  Test  Group  Mr.  Bucher  served  in  the  capacity  of 
Engineering  Supervisor. 

During  the  next  two  years  Mr.  Bucher  was  supervisor  of  the  Systems 
Engineering  Unit  in  the  Inertial  Navigation  Project  Engineering  Section 
with  responsibility  for  conducting  special  studies  and  investigations 
of  special  systems  problems  as  well  as  development  of  Engineering 
documents  such  as  Technical  descriptions,  model  specifications,  and 
program  reports. 

Mr.  Bucher  joined  the  Inertial  Navigation  Logistics  division  in  I960  to 
serve  as  Group  Leader  of  the  Logistics  Engineering  Group  which  was  being 
started.  During  this  period  an  organization  was  developed  which  was 
oriented  to  approach  the  problems  of  maintenance,  support  and  maintain¬ 
ability  from  a  quantitative  viewpoint.  In  mid-1962  Mr.  Bucher  assumed 
responsibilities  for  the  Logistics  Engineering  and  Technical  Publication 
Section  in  the  capacity  of  Chief. 

Mr.  Bucher  received  a  B.S.  in  physics  from  Wheaton  College,  a  B.  S.  in 
electrical  engineering  from  Illinois  Institute  of  Technology  and  a  M.S. 
In  electrical  engineering  from  the  University  of  Southern  California. 

He  is  a  member  of  Tau  Beta  Pi  and  Etta  Kappa  Nu. 
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S.  R.  Calabro 


President,  Electronics  Reliability  Corporation 


S.  R.  Calabro  is  a  graduate  of  City  College  of  New  York  with  a 
Bachelor's  Degree  in  electrical  engineering. 

He  is  also  a  licensed  Professional  Engineer  in  Pennsylvania.  He 
has  lectured  on  quality  control  at  Rutgers  University  and  other 
institutions . 

He  was  the  Director  of  the  Product  Assiarance  Division, 
International  Electric  Corporation,  Paramus,  New  Jersey.  In  this 
capacity,  he  was  responsible  for  all  reliability  and  quality  control 
activity,  the  scope  of  which  necessitated  the  generation  of  many 
new  concepts  in  order  to  achieve  specified  reliability  goals. 

For  eleven  years  he  was  the  Manager  and  Director  of  Quality 
Control  and  Reliability  for  the  International  Telephone  and 
Telegraph  Corporation. 

He  has  also  had  extensive  experience  during  World  War  II 
as  a  Signal  Corps  officer  in  proctirement  and  inspection  activities. 

He  is  presently  the  President  of  the  Electronics  Reliability 
Corp.,  at  666  Fifth  Avenue,  New  York  City  which  firm  specializes 
in  Reliability  and  Maintainability  Engineering. 

He  is  a  member  of  the  American  Society  for  Quality  Control, 
the  American  Ordnance  Association  and  has  lectured  at  meetings 
of  the  American  Management  Association  and  symposiums  held  on 
various  occasions  by  Industry  and  Government  Agencies. 

He  is  the  author  of  "Reliability  Principles  and  Practices" 
published  by  McGraw-Hill. 


JAMES  H.  S.  CHIN 


ENGINEERING  SECTION  HEAD 

Surface  Armament  Division,  Sperry  Gyroscope  Company 


EDUCATION:  BSEE,  University  of  Michigan,  1950 
MSEE,  University  of  Michigan,  1951 

EXPERIENCE:  1951  to  Present,  Sperry  Gyroscope  Company 


Mr.  Chin  came  to  Sperry  in  1951  as  'in  assistant  project 
engineer  working  on  circuit  design  and  system  development  work  on  fire 
control  radars.  He  spent  the  following  years  in  system  development 
work  on  Naval  tracking  and  missile  guidance  radars,  and  in  November 
1957  was  promoted  to  senior  engineer.  The  group  redundancy  technique 
which  has  been  successfully  applied  to  Naval  Tracking  Radar  was  a 
result  of  Mr.  Chin's  work  during  this  period.  In  1961  he  was 
appointed  to  his  present  position  as  engineering  section  head  for 
mathematical  analysis  in  the  Reliability  Engineering  Department. 


PROFESSIONAL  Etta  Kappa  Nu,  Member  IRE,  Vice  Chairman  of  the  IRE 
ACTIVITIES:  Professional  Group  on  Reliability  and  Quality  Control 
Metropolitan  New  York  Chapter.  He  has  presented 
numerous  papers  at  WESCON  and  IRE  conventions  and  as 
guest  speaker,  he  lectured  at  the  Cornell  University 
Industrial  Seminar;  the  ASQC  symposium  at  the 
University  of  Rochester,  and  at  the  Annual  meeting  of 
the  Operational  Research  Society  of  America,  all  in  the 
area  of  reliability. 
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JEROME  E.  HOROWITZ 


Mr.  Horowitz  is  a  graduate  of  the  University  of  Rhode  Island 
with  a  B.S.  in  chemical  engineering.  In  addition,  be  has  taken 
courses  at  Brown  University  and  various  Service  Schools. 

He  is  presently  employed  as  a  Staff  Reliability  and  Maintainability 
Engineer  by  the  Directorate  of  Technical  Services,  ESD,  L  G  Hanscom  Fid. 
Prior  to  joining  the  Air  Force  he  served  as  Supervisor  for  Eastern 
New  England  Area  of  the  U.S.  Army  Signal  Supply  Agency,  Phlla.,  Pa.  and 
in  addition,  prepared  special  staff  studies  for  the  Office  of  the  Chief 
Signal  Officer.  He  is  a  registered  Professional  Engineer  and  a  member 
of  the  American  Society  for  Quality  Control  and  the  National  Society  of 
Professional  Engineers. 
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JOHN  JENORIKI 


John  Jenoriki  is  a  Senior  Engineer  in  the  Equipment  and  Systems 
Evaluation  Branch,  C&E  Department,  of  Federal  Electric  Corporation? 
the  Service  Associate  of  ITT,  Paramus,  New  Jersey  and  has  been  with 
the  company  since  1956.  He  is  presently  serving  as  project  engineer 
responsible  for  the  Reliability-Maintainability  prediction  aspects 
of  the  Big  Rally  II  and  European  Mediterranean  Tropo  Communication 
Systems.  Mr.  Jenoriki  is  also  engaged  in  the  determination  of 
techniques  for  predicting  the  reliability  of  electronic  equipment 
during  the  early  (pre-design)  stage. 

Past  responsibilities  have  included  such  project  as;  (l)  DASH 
Weapon  System  Reliability  Study  (a  destroyer  based  unmanned  helicopter 
that  is  remotely  controlled);  (2)  Systems  Integration  Studies  consisting 
of  reliability  studies  of  special  items  such  as  Power  Amplifier 
Klystrons,  Planar  Triode,  416D/6280,  Magnetrons,  T-R  Tube  6322,  etc.; 

(3)  Engineering  editing  of  the  monthly  DEWLine  Reliability  Report  to 
the  4601  at  USAF  Support  Wing;  and  (4)  Systems  Engineering  for  various 
projects  involving  radar  profile  readings  and  calculations  of  path 
loss,  channel  noise,  etc.  in  accordance  with  CCIR  and  CCITT. 

Mr .  Jenoriki ' s  experience  in  the  field  of  reliability  and  maintainability 
prediction  includes  the  application  of  prediction  methods  such  as :  ( 1 ) 

electrical/electronic  TR-59-416-1,  TR-1100,  and  RADC  TR-58-111;  (2) 
mechanical  and  electro-mechanical,  RCA-176;  (3)  part  failure  distributions 
and  predictions  using  the  exponential,  weibull,  etc.  in  conjunction  with 
failure  modes;  catastrophic,  degradation,  etc.  He  has  field  experience 
in  Radar,  Communication,  Telephone,  Telegraph  and  has  been  responsible 
for  the  operation  and  maintenance  of  these  equipments  at  DEWLine  Sites. 

He  is  a  graduate  of  Capitol  Radio  Engineering  Institute  in  Electronic 
Engineering.  He  also  attended  Radar,  Communication  and  Navigational 
schools  conducted  by  Federal  Electric  Corporation.  He  is  an  associate 
member  of  American  Institute  of  Electrical  Engineers,  a  senior  member 
of  Capitol  Radio  Engineering  Institute  Association,  and  a  member  of 
Electronic  Industries  Association. 


^^Now  with  Computer  Applications,  Inc. 
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W.  B.  JOHNSON 


Mr.  Johnson  attended  the  University  of  Hawaii,  University  of 
Pittsburgh,  and  Syracuse  University.  His  major  subjects  were  Electrical 
and  Industrial  Engineering.  He  also  completed  a  course  on  Electronic 
Packaging  for  Design  Engineers  at  the  University  of  California. 

Since  joining  the  General  Electric  Company  in  1948,  he  has  worked  as 
an  Electro-Mechanical  Designer  and  Project  Engineer  with  the  Specialty, 
Television  Receiver  and  Defense  Systems  Departments.  Mr.  Johnson  has 
wide  experience  in  the  electronic  design  and  packaging  of  oscilloscopes, 
signal  generators,  AM-FM  radios,  television  receivers,  electronic  system 
evaluators,  and  transistor  pellet  mount  machinery.  He  has  done 
considerable  work  in  the  areas  of  oscillator  radiation,  printed  circuit 
board  development,  dip  soldering,  spark  gaps,  heat  analysis,  packaging, 
console  design,  and  micro-miniaturization. 

On  assignment  with  the  Defense  Systems  Department  in  the  Design 
Standards  area,  he  utilized  his  past  experience  in  providing  consulta¬ 
tion  in  the  electronic  packaging  area  and  in  evaluating  design  practices 
utilized  within  the  General  Electric  Co.  In  addition,  while  working 
on  the  Ajx'llo  Support  Program,  he  reviewed  specifications  and  design 
practices  utilized  by  various  NASA  centers  and  subcontractors.  A 
report  consisting  of  an  implementation  plan  to  consolidate  all  common 
specifications  and  practices  resiilted  from  this  effort. 

• 

Mr.  Johnson  is  presently  responsible  for  maintainability  engineering 
within  the  Defense  Systems  Department  and  NUDETS  Project. 

Mr.  Johnson  is  a  member  of  the  American  Rocket  Society  and  the 
Syracuse  General  Electric  Engineers  Association. 
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JEROME  KLION 


Jerome  Kllon  received  his  BA  in  Mathematics-Physics  from  Syracuse 
University  in  1957  and  is  presently  working  toward  his  Masters  Degree 
in  Electronic  Engineering  from  the  same  Institution.  He  has  been  a 
member  of  the  Reliability  Techniques  Group  of  the  Rome  Air  Development 
Center,  Grlfflss  Air  Force  Base,  New  York  since  1957.  There  he  has 
conducted  investigations  relevant  to  the  development  of  new  techniques 
for  improving,  predicting,  and  verifying  the  reliability  of  ground 
electronic  equipment.  He  is  the  author  of  several  papers  on  reliability 
presented  and  published  at  national  symposia.  He  is  a  member  of  the 
IRE  and  Professional  Group  on  Reliability  and  Quality  Control  of  the  IRE. 


S.M.  Las ter 

General  Electric  Company 
Syracuse,  New  York 


Mr.  Laster  Is  an  operations  analyst  in  the  Defense  Systems 
Department  of  the  General  Electric  Company,  and  is  presently  a 
group  leader  In  the  systems  engineering  unit  of  that  department's 
Nuclear  Detection  Subsection. 

At  General  Electric  he  has  also  worked  on  operations  analysis 
studies  for  the  Atlas  guidance  system,  advanced  guidance  systems 
projects,  communications  studies,  and  mobile  ballistic  missiles 
studies . 

Before  joining  the  General  Electric  Company,  Mr.  Laster  had 
worked  at  the  Harvard  Business  School,  on  Air  Force  Logistic 
studies,  and  at  Harbrldge  House,  Boston,  Massachusetts.  Mr.  Laster 
received  an  AB  from  Harvard  College  in  philosophy  and  mathematics, 
and  la  doing  graduate  work  at  Syracuse  University  in  mathematics. 
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FRANK  D.  MAZZOLA 


Frank  D.  Mazzola  received  his  BS  Degree  In  Electrical  Engineering 
from  Rensselaer  l^olyteohnlc  Institute  In  1952.  Since  graduation  he 
has  been  employed  at  the  Rome  Air  Development  Center,  Griff Iss  Air 
Force  Base,  New  York,  where  his  duties  have  been  concerned  chiefly  with 
general  and  special  purpose  test  equipment  and  maintainability  techniques. 
In  1959  he  became  leader  of  a  new  Maintainability  Group  organized  within 
the  Applied  Research  Laboratory  and  has  since  planned  and  supervised  study 
and  development  of  techniques  for  maintainability  prediction,  measurement 
and  Improvement.  He  Is  the  author  of  several  papers  and,  as  a  member  of 
certain  USAF  committees,  has  contributed  to  various  official  publications 
In  the  maintainability  area. 


xlll 


IRWIN  NATHAN 


Irvin  Nathan  Is  a  Senior  Systems  Engineer  in  the  Reliability  Section, 
Arma  Division,  American  Bosch  Arma  Corporation.  He  received  an  M.E. 
degree  from  Stevens  Institute  of  Technology,  and  M.E.E.  and  M.I.E. 
degrees  from  New  York  University  where  he  is  presently  working  towards 
an  Sc.  D.  degree  in  Operations  Research.  He  is  currently  responsible 
for  the  technical  direction  of  the  activities  of  the  Systems  Evalua¬ 
tion  Group  of  the  Section,  including  generation  of  system  reliability 
estimates  as  predicted  from  system  configuration,  design,  and  usage 
projections,  and  as  computed  from  failure  and  operating  time  data.  In 
addition,  he  is  responsible  for  designing  statistical  reliability  tests 
and  the  application  of  "state-of-the-art"  O-R  techniques  for  solution 
of  maintainability,  availability,  and  logistic  problems. 

Prior  to  joining  the  Reliability  Section  he  was  engaged  in  the 
design,  development  and  application  of  inertial  components  for 
use  in  the  Arma  Inertial  Guidance  System  for  the  Atlas  ICBM  and 
the  Arma  Subminiature  Gyro  Compass.  Previously,  he  was  an  Ri&D 
Electronics  Engineer  at  Bendix  Aviation  Corporation  and  at  Reeves 
Instrument  Corporation  where  he  worked  on  fire  control  systems. 

Mr.  Nathan  is  a  member  of  the  New  York  State  Society  of  Profes¬ 
sional  Engineers.  His  other  professional  activities  include  a 
presentation  on  the  statistical  analysis  of  reliability  field 
data,  to  be  given  at  the  1963  IEEE  International  Convention. 
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LOUIS  T.  POPE 


Louis  T.  Pope  was  born  in  1919.  He  served  as  an  aerial  navigator 
in  the  United  States  Air  Force  in  both  World  War  II  and  the  Korean 
conflict.  Prior  to  1943*  he  worked  as  an  electronic  maintenance 
technician  and  foreman.  He  received  the  B.A.  degree  from  Texas 
ChrlstiSn  University  in  1955  and  the  M.A.  and  Ph.D.  degrees  from  the 
Universfty  of  Houston  in  1959  and  1961.  Dr,  Pope  has  been  employed 
as  a  Research  Psychologist  with  the  6570th  Aerospace  Medical  Research 
Laboratories  since  May  1959>  and  is  assigned  to  the  Maintenance  Design 
Section.  He  has  recently  completed  studies  on  hiunan  monitoring  behavior 
and  on  electronic  checkout  equipment.  He  has  made  presentations  on 
the  subject  of  maintainability  before  several  military  and  industry  groups. 
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F.  G.  REBER,  JR 


Mr.  Reber  pursued  his  undergraduate  work  at  Drexel  Institute  of 
Technology,  Pacific  University  and  Temple  University  toward  an  AB  in 
Physics . 

Mr.  Reber 's  early  training  with  RCA  included  a  Management  Training 
Program  he  attended  in  Company  headquarters,  Camden,  N.J. 

Mr.  Reber  became  associated  with  Philco  Corporation  in  1951,  performing 
technical  electronic  work  on  prototype  radars.  He  then  joined  Eckert- 
Mauchly  (presently  a  Division  of  Sperry-Rand)  and  built  specialized  test 
equipment  for  various  computer  circuits. 

In  1953  he  joined  RCA  and  was  involved  in  the  test  program  for  the  AN/ 
ARC-21 5  later  supervising  a  production  program  for  AN/ARC-21  product 
improvement . 

From  1955  to  I960  Mr.  Reber  worked  as  a  test  process  engineer  developing 
speciaj-ized  test  equipment  for  computer  and  high-speed  memory  testing. 

In  I960,  he  entered  product  assurance  in  product  operations  of  the 
Electronic  Data  Processing  Division.  This  included  planning,  design, 
and  prototype  evaluation  phases  of  engineering  projects. 

Early  in  I960,  Mr,  Reber  was  given  the  responsibility  for  product 
evaluation  in  the  product  assurance  section  of  Aerospace  Communications 
and  Control  Division. 

In  1962,  Mr.  Reber  was  selected  to  administrate  the  Product  Assurance 
activities  of  the  AN/rSQ-47  System  Program.  This  involved  setting  up 
a  complete  program  for  reliability,  maintainability,  quality  control, 
failure  data  collection,  analysis  and  standardization  for  this  system. 
Presently,  Mr.  Reber  is  Administrator,  Product  Assurance  for  the  AN/ 
TSQ-47  Program  Management  Office. 
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STANLEX  A.  ROSMTHAL 


Stanley  A.  Rosenthal,  Head,  Reliability  Section,  Anna  Division, 
American  Bosch  Arma  Corporation,  received  his  B.E.K.  degree  from 
City  College  of  New  York  and  his  M.E.E.  degree  from  New  York 
University,  where  he  has  been  pursuing  post-graduate  studies  toward 
a  doctoral  program  in  control  systems  and  simulation  techniques. 

He  is  currently  responsible  for  the  administration  and  technical 
direction  of  all  Arma  Division  reliability  activities,  including 
the  reliability  program  for  the  AtD.as  Missile  Guidance  System. 
Previously  he  was  responsible  for  systems  reliability  analysis  for  an 
inertial  bombing-navigation  system,  for  the  Sperry  Gyroscope  Company, 
after  being  engaged  in  the  systems  engineering  effort  on  this 
equipment.  Prior  to  joining  Sperry,  he  was  concerned  with  the 
application,  utilization,  and  performance  of  industrial  electronic 
control  equipment,  for  the  General  Electric  Company. 

During  this  time,  for  a  period  of  over  five  years,  he  also  served 
as  an  adjunct  member  of  the  electrical  engineering  faculty  at  Coopcir 
Union  School  of  Engineering. 

Mr.  Rosenthal  is  a  member  of  Tau  Beta  Pi,  Eta  Kappa  Nu,  Institute 
of  Radio  Engineers,  American  Society  for  Quality  Control,  Operations 
Research  Society  of  America,  American  Astronautical  Society,  and  is 
a  New  York  State  Licensed  Professional  Engineer.  He  is  the  author  of 
several  papers  on  system  reliability  aspects  and  reliability  programs, 
presented  at  national  meetings  and  symposia  of  the  IRE/PCWIL,  IRE/ 
PGRQC,  and  SAE,  and  is  a  contributor  to  the  IRE-ASQC  Reliability 
Training  Text. 
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Richard  B.  Schwartz 


Richard  B.  Schwartz  Is  a  ^;cnlor  Statistician  In  the  Equipment  and 
Systems  Evaluation  Branch,  C  &  E  Department  of  Federal  Electric 
Corporation,  the  Service  Associate  of  ITT,  Paramus,  New  Jersey  euid 
has  been  with  the  company  since  March  1959*  His  duties  involve  the 
research,  development  and  application  of  statistical  methods  used 
In  predicting  and  measuring  the  reliability  and  maintainability  of 
electronic  equipment  and  systems.  He  Is  responsible  for  the  mathe¬ 
matical  and  statistical  approach  used  in  the  availability  prediction 
of  systems  such  as  Big  Rally  II  and  the  EUR-MED  Tropo  Communication 
System.  Mr.  Schwartz  established  the  statistical  criteria  for  the 
Navy  Service  Failure  Analysis  Program.  The  aim  of  this  program  Is 
the  lngprovement  in  electronic  equipment  performemce  through  relia¬ 
bility  and  maintainability  analysis  of  field  operational  data. 

Ife  was  also  responsible  for  the  development  of  spare  parts  provisioning 
formvilas,  for  the  h63L  Materiel  Control  Program,  which  would  determine 
the  number  of  spares  required  so  that,  at  a  specified  probability 
level,  the  proper  spare  part  woiald  be  available  to  effect  a  required 
repair.  Mr.  Schwartz  developed  the  statistical  approach  used  In 
Isolating  and  identifying  reliability  and  maintainability  problems 
on  the  DEWLine. 

He  received  his  B.B.A.  degree  in  Statistics  from  the  City  College  of 
New  York  and  is  presently  working  there  toward  his  M.B.A.  in 
Statistics  which  he  expects  to  receive  in  1964.  Ife  is  a  member  of 
the  American  Statistical  Association  euid  the  American  Society  for 
Quality  Control. 
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W.  K.  Warner  -  Director,  Reliability  Department 

Space  &  Infoimtion  Systems  Division 
North  American  Aviation,  Inc. 


Mr.  Warner  has  21  years  aircraft  and  missile  engineering  ej^erlence 
of  increasing  responsibility,  the  last  twelve  years  of  \dilch  have 
been  with  S&H).  His  current  assignment  as  Director  of  Reliability 
Department  places  him  in  ultimate  charge  of  edl  reliability  efforts 
for  S&ID  of  North  American  Aviation.  Under  his  direction,  the  S&ID 
Reliability  Department  was  ranked  by  the  U.S.  Air  Force  as  one  of 
the  best  in  the  Nation,  and  the  Department  has  been  recommended  as 
a  model  to  other  con^anles  by  NASA. 

His  background  also  includes  heading  up  Standards  Engineering,  Human 
Factors  Engineering,  Flight  Test  Analysis.  In  the  past,  he  was 
engineering  group  leader  and  assistant  project  engineer  with  Douglas 
Aircraft,  and  chief  engineer  for  Piper  Aircraft  Company  and  Aviation 
Maintenance  Corporation. 

His  educational  background  Includes  mechanical  engineering  at 
the  University  of  Kansas. 
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STUART  A.  UEISBERG 


Mr.  Weisberg  Is  an  associate  engineer  in  the  Reliability  Department, 
Surface  Armament  Division,  Sperry  Gryroscope  Company  vhBre  he  has  been 
employed  since  June  1962.  He  is  engaged  in  various  theoretical  studies 
concerning  redundancy  and  availability,  the  construction  of  mathematical 
models,  and  reliability  prediction  techniques.  His  previous  experience 
was  with  the  Raytheon  Company  from  September  I960  as  a  systems  analyst 
concerned  with  the  B-58  Doppler  Radar,  and  from  June  1961  to  September 

1961  in  a  reliability  department  where  he  was  engaged  in  a  preventive 
maintenance  study.  From  June  1959  to  September  1959  he  was  employed  as 
an  analyst  and  computer  programmer  by  the  General  Electric  Company. 

Mr.  Weisberg  received  the  Bachelor  of  Science  degree  in  Applied 
Mathematics  from  the  Polytechnic  Institute  of  Brooklyn  in  1959.  He  was 
a  full  time  student  at  the  Polytechnic  graduate  school  from  I960  to 

1962  and  is  now  attending  on  a  part  time  basis.  He  has  completed  the 
course  reqvilrements  for  the  P.H.D.  in  Mathematics.  While  in  graduate 
school  he  held  a  Teaching  Fellowship  and  tau^t  courses  in  differential 
and  Integral  calculus.  He  is  now  engaged  as  a  part-time  instructor  by 
the  Vocational  Education  and  Extension  Board  of  Nassau  County,  New  York 
and  teaches  graduate  level  mathematics  courses.  Mr.  Weisberg  is  a 
member  of  the  IRE  and  it's  PGRQC. 
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